CVE-2009-1064
MEDIUM
5.8
CVSS Severity Score
Vulnerability Description
Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method.
Affected Platforms (CPE)
📦
Orbit Downloader
Orbit Downloader
= 2.6.3📦
Orbit Downloader
Orbit Downloader
= 2.6.4📦
Orbitdownloader
Orbit Downloader
<= 2.8.7📦
Orbitdownloader
Orbit Downloader
= 2.6.1📦
Orbitdownloader
Orbit Downloader
= 2.6.3📦
Orbitdownloader
Orbit Downloader
= 2.6.4📦
Orbitdownloader
Orbit Downloader
= 2.6.5📦
Orbitdownloader
Orbit Downloader
= 2.7.1📦
Orbitdownloader
Orbit Downloader
= 2.7.3📦
Orbitdownloader
Orbit Downloader
= 2.7.5📦
Orbitdownloader
Orbit Downloader
= 2.7.6📦
Orbitdownloader
Orbit Downloader
= 2.7.7📦
Orbitdownloader
Orbit Downloader
= 2.7.8📦
Orbitdownloader
Orbit Downloader
= 2.7.9📦
Orbitdownloader
Orbit Downloader
= 2.8.1📦
Orbitdownloader
Orbit Downloader
= 2.8.2📦
Orbitdownloader
Orbit Downloader
= 2.8.3📦
Orbitdownloader
Orbit Downloader
= 2.8.4📦
Orbitdownloader