CVE

Id
37622  
CVE No.
CVE-2009-0187  
Status
Candidate  
Description
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.  
Phase
Assigned (20090120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
408486 37622 CVE-2009-0187 BUGTRAQ:20090225 Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow  View
408487 37622 CVE-2009-0187 URL:http://www.securityfocus.com/archive/1/archive/1/501220/100/0/threaded  View
408488 37622 CVE-2009-0187 MISC:http://secunia.com/secunia_research/2009-9/  View
408489 37622 CVE-2009-0187 BID:33894  View
408490 37622 CVE-2009-0187 URL:http://www.securityfocus.com/bid/33894  View
408491 37622 CVE-2009-0187 OSVDB:52294  View
408492 37622 CVE-2009-0187 URL:http://osvdb.org/52294  View
408493 37622 CVE-2009-0187 SECUNIA:33843  View
408494 37622 CVE-2009-0187 URL:http://secunia.com/advisories/33843  View
408495 37622 CVE-2009-0187 VUPEN:ADV-2009-0521  View
408496 37622 CVE-2009-0187 URL:http://www.vupen.com/english/advisories/2009/0521  View
408497 37622 CVE-2009-0187 XF:orbitdownloader-connecting-bo(48932)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42174 JVNDB-2009-003181 Foxit Reader における任意のコードを実行される脆弱性 Foxit Reader は、新規シンボルがゼロの JBIG2 シンボル辞書セグメントを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-0191 37622 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003181.html  View