Vulnerability in N/a
CVE-2008-1602
Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download…
EPSS: 0.766 (99.0th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 3798 (x_refsource_SREASON, third-party-advisory)
- www.coresecurity.com/ (x_refsource_MISC)
- ADV-2008-1101 (vdb-entry, x_refsource_VUPEN)
- 20080403 CORE-2008-0314 - Orbit Downloader "Download failed" buffer overflow (mailing-list, x_refsource_BUGTRAQ)
- 28541 (vdb-entry, x_refsource_BID)
- 29669 (x_refsource_SECUNIA, third-party-advisory)
- orbitdownloader-url-bo(41649) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2008-1602?
- CVE-2008-1602 is a vulnerability in N/a. Published 2008-04-06.
- Is CVE-2008-1602 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.