header-logo
Suggest Exploit
vendor:
Orbital Viewer
by:
jduck
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Orbital Viewer
Affected Version From: Orbital Viewer 1.04
Affected Version To: Orbital Viewer 1.04
Patch Exists: YES
Related CWE: CVE-2010-0688
CPE: a:david_manthey:orbital_viewer:1.04
Metasploit:
Other Scripts:
Platforms Tested: Windows
2010

Orbital Viewer ORB File Parsing Buffer Overflow

This module exploits a stack-based buffer overflow in David Manthey's Orbital Viewer. When processing .ORB files, data is read from file into a fixed-size stack buffer using the fscanf function. Since no bounds checking is done, a buffer overflow can occur. Attackers can execute arbitrary code by convincing their victim to open an ORB file.

Mitigation:

Apply the latest patch provided by the vendor.
Source

Exploit-DB raw data: