Back to CVE Browser

CVE-2009-0187

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.0320%

EPSS Percentile12.00th

PublishedFeb 26, 2009

Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.

Affected Platforms (CPE)

📦

Orbitdownloader

Orbit Downloader

= 2.8.2

📦

Orbitdownloader

Orbit Downloader

= 2.8.3

📦

Orbitdownloader

Orbit Downloader

= 2.8.4

References & Advisories

🔗 http://osvdb.org/52294

🔗 http://secunia.com/advisories/33843

🔗 http://secunia.com/secunia_research/2009-9/

🔗 http://www.securityfocus.com/archive/1/501220/100/0/threaded

🔗 http://www.securityfocus.com/bid/33894

🔗 http://www.vupen.com/english/advisories/2009/0521

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/48932

🔗 http://osvdb.org/52294

Related Vulnerabilities

CVE-2008-160210.0

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long downl...

CVE-2009-10645.8

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote a...

CVE-2010-21044.3

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary...

CVE-2009-049210.0

Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerabilit...