CVE-2009-0187

Related Files

Orbit Downloader Connecting Log Creation Buffer Overflow

Posted Nov 26, 2009

Authored by MC | Site metasploit.com

This Metasploit module exploits a stack overflow in Orbit Downloader 2.8.4. When an attacker serves up a malicious web site, arbitrary code may be executed. The PAYLOAD windows/shell_bind_tcp works best.

tags | exploit, web, overflow, arbitrary

systems | windows

advisories | CVE-2009-0187

SHA-256 | fc2ecb99b792d68ea89a8a6a032a89fd3a704802a138b2d02e472909058f1f87

Download | Favorite | View

Secunia - Orbit Downloader Buffer Overflow

Posted Feb 25, 2009

Authored by Stefan Cornelius | Site secunia.com

Secunia Research has discovered a vulnerability in Orbit Downloader, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when generating the "Connecting" log message for HTTP downloads. This can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into downloading from a malicious HTTP server or opening a specially crafted HTTP URL containing an overly long host name. Successful exploitation allows execution of arbitrary code. Orbit Downloader versions 2.8.2 and 2.8.3 are vulnerable.

tags | advisory, web, overflow, arbitrary

advisories | CVE-2009-0187

SHA-256 | c0fec1b2b959aed07156096d8dc79baf656806760da36812f1bc48b1d551b693

Download | Favorite | View