Orbit Downloader 'Connecting' Log Message Creation Remote Buffer Overflow Vulnerability
BID:33894
Info
Orbit Downloader 'Connecting' Log Message Creation Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 33894 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-0187 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 03 2009 12:00AM |
| Updated: | Mar 17 2009 04:16PM |
| Credit: | fl0 fl0w and Stefan Cornelius |
| Vulnerable: |
Orbit Downloader Orbit Downloader 2.8.4 Orbit Downloader Orbit Downloader 2.8.3 Orbit Downloader Orbit Downloader 2.8.2 |
| Not Vulnerable: |
Orbit Downloader Orbit Downloader 2.8.5 |
Discussion
Orbit Downloader 'Connecting' Log Message Creation Remote Buffer Overflow Vulnerability
Orbit Downloader is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will cause a denial-of-service condition.
This issue affects versions prior to Orbit Downloader 2.8.5.
Orbit Downloader is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will cause a denial-of-service condition.
This issue affects versions prior to Orbit Downloader 2.8.5.
Exploit / POC
Orbit Downloader 'Connecting' Log Message Creation Remote Buffer Overflow Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploits are available:
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploits are available:
Solution / Fix
Orbit Downloader 'Connecting' Log Message Creation Remote Buffer Overflow Vulnerability
Solution:
The vendor has released Orbit Downloader 2.8.5 to address this issue. Please see the references for more information.
Orbit Downloader Orbit Downloader 2.8.2
Orbit Downloader Orbit Downloader 2.8.3
Orbit Downloader Orbit Downloader 2.8.4
Solution:
The vendor has released Orbit Downloader 2.8.5 to address this issue. Please see the references for more information.
Orbit Downloader Orbit Downloader 2.8.2
-
Orbit Downloader Orbit Downloader V2.8.5
http://www.orbitdownloader.com/download.htm
Orbit Downloader Orbit Downloader 2.8.3
-
Orbit Downloader Orbit Downloader V2.8.5
http://www.orbitdownloader.com/download.htm
Orbit Downloader Orbit Downloader 2.8.4
-
Orbit Downloader Orbit Downloader V2.8.5
http://www.orbitdownloader.com/download.htm
References
Orbit Downloader 'Connecting' Log Message Creation Remote Buffer Overflow Vulnerability
References:
References:
- 0day Orbit dw (floflow)
- Orbit Downloader Homepage (Orbit Downloader)
- Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow (Secunia)
- Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow (Secunia Research