HTTP: Orbit Downloader ActiveX Control

This signature detects attempts to exploit a known vulnerability in Orbit Downloader. An attacker can create a malicious Web site containing dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Orbit Downloader is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will cause a denial-of-service condition. This issue affects versions prior to Orbit Downloader 2.6.5.

Affected Products

Orbit_downloader orbit_downloader

References

BugTraq: 28541 34200

CVE: CVE-2009-1064

URL: http://www.coresecurity.com/?action=item&id=2211

Short Name

HTTP:STC:ACTIVEX:ORBIT-DWNLDR

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Orbit Downloader ActiveX Control

Extended Description

Affected Products

References

Found a potential security threat?