Back to CVE Browser

CVE-2008-1602

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1300%

EPSS Percentile44.86th

PublishedApr 6, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.

Affected Platforms (CPE)

📦

Orbit Downloader

Orbit Downloader

= 2.6.3

📦

Orbit Downloader

Orbit Downloader

= 2.6.4

References & Advisories

🔗 http://secunia.com/advisories/29669

🔗 http://securityreason.com/securityalert/3798

🔗 http://www.coresecurity.com/?action=item&id=2211

🔗 http://www.securityfocus.com/archive/1/490458/100/0/threaded

🔗 http://www.securityfocus.com/bid/28541

🔗 http://www.vupen.com/english/advisories/2008/1101

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41649

🔗 http://secunia.com/advisories/29669

Related Vulnerabilities

CVE-2009-01879.3

Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers...

CVE-2009-10645.8

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote a...

CVE-2010-21044.3

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary...

CVE-2008-034410.0

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote a...