CVE-2008-1602

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.

Desbordamiento de búfer basado en pila en el controlador de Orbit 2.6.3 y 2.6.4 permite a atacantes remotos ejecutar código de su elección a través de un URL de descarga largo, que no es manejado correctamente durante la conversión Unicode para una notificación balloon después de que haya fallado una descarga.