Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-1602.
PoCs published by Metasploit, Diego Juarez, juan vazquez, including Metasploit module exploits/windows/fileformat/orbit_download_failed_bof.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Orbit Downloader via a crafted metalink file. It leverages the MultiByteToWideChar function to trigger the vulnerability, leading to arbitrary code execution.
Description
Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.
Exploits (2)
This exploit targets a stack-based buffer overflow in Orbit Downloader via a crafted metalink file. It leverages the MultiByteToWideChar function to trigger the vulnerability, leading to arbitrary code execution.
This exploit leverages a stack-based buffer overflow in Orbit Downloader via a maliciously crafted metalink file. The vulnerability arises from insecure Unicode conversion using MultiByteToWideChar, allowing arbitrary code execution when the file is opened.