QwikSec

Security Database

CVE

CWE

Training

CVE-2008-1602

Published: Apr 6, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SREASON

http://www.coresecurity.com/?action=item&id=2211

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

20080403 CORE-2008-0314 - Orbit Downloader "Download failed" buffer overflow

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

orbitdownloader-url-bo(41649)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.