Signature Detail

HTTP: Orbit Downloader ActiveX Control

This signature detects attempts to exploit a known vulnerability in Orbit Downloader. An attacker can create a malicious Web site containing dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Orbit Downloader is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will cause a denial-of-service condition. This issue affects versions prior to Orbit Downloader 2.6.5.

Affected Products

• Orbit Downloader 2.6.3
• Orbit Downloader 2.6.4

References

• BugTraq: 34200
• BugTraq: 28541
• CVE: CVE-2009-1064
• CVE: CVE-2008-1602
• URL: http://www.coresecurity.com/?action=item&id=2211