QwikSec

Security Database

CVE

CWE

Training

CVE-2009-0187

Published: Feb 26, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_VUPEN

vdb-entry

x_refsource_BID

http://secunia.com/secunia_research/2009-9/

x_refsource_MISC

orbitdownloader-connecting-bo(48932)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_OSVDB

20090225 Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.