Check Point Advisories

Orbit Downloader URL Parameter Buffer Overflow - Ver2 (CVE-2009-0187)

Check Point Reference:	CPAI-2014-0795
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2009-0187
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A buffer overflow vulnerability has been reported in Orbit Downloader. The vulnerability is due to insufficient boundary checking in the URL string processing. A remote attacker could exploit this vulnerability by enticing a target user to open a malicious long URL. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.