---------------------------------------------------------------------- A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today: https://psi.secunia.com/ Read more about this new version: https://psi.secunia.com/?page=changelog ---------------------------------------------------------------------- TITLE: Orbit Downloader URL Processing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA29669 VERIFY ADVISORY: http://secunia.com/advisories/29669/ CRITICAL: Highly critical IMPACT: System access WHERE: >From remote SOFTWARE: Orbit Downloader 2.x http://secunia.com/product/14890/ DESCRIPTION: Diego Juarez has reported a vulnerability in Orbit Downloader, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when converting processed URLs from ASCII to Unicode encoding. This can be exploited to cause a stack-based buffer overflow via an invalid URL longer than 4096 bytes. Successful exploitation may allow execution of arbitrary code. The vulnerability is reported in versions 2.6.3 and 2.6.4. Prior versions may also be affected. SOLUTION: Update to version 2.6.5. PROVIDED AND/OR DISCOVERED BY: Diego Juarez, Core Security Technologies ORIGINAL ADVISORY: http://www.coresecurity.com/?action=item&id=2211 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------