← back
CVE-2009-0187

CVE-2009-0187

EPSS 40.1%
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16569unverifiedexploitdbwww.exploit-db.com/exploits/8118unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/52294http://secunia.com/advisories/33843http://secunia.com/secunia_research/2009-9/https://exchange.xforce.ibmcloud.com/vulnerabilities/48932http://www.securityfocus.com/archive/1/501220/100/0/threadedhttp://www.securityfocus.com/bid/33894http://www.vupen.com/english/advisories/2009/0521