CVE-2010-0688

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Orbital Viewer - '.ORB' File Parsing Buffer Overflow (Metasploit)2010-03-09 · local · windows · Verified
• Orbital Viewer 1.04 - '.ov' Local Universal Stack Overflow (SEH)2010-06-19 · local · windows · Verified
• Orbital Viewer 1.04 - '.orb' File Local Universal Overflow (SEH)2010-02-26 · local · windows · Verified

Impact

Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or (2) .ov file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/38720
• http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-011-orbital-viewer-orb-buffer-overflow/
• http://www.exploit-db.com/exploits/13940
• http://www.osvdb.org/62580
• http://www.securityfocus.com/bid/38436
• http://www.securityfocus.com/bid/40985
• http://www.vupen.com/english/advisories/2010/0478
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59560
• http://secunia.com/advisories/38720
• http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-011-orbital-viewer-orb-buffer-overflow/
• http://www.exploit-db.com/exploits/13940
• http://www.osvdb.org/62580
• http://www.securityfocus.com/bid/38436
• http://www.securityfocus.com/bid/40985
• http://www.vupen.com/english/advisories/2010/0478
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59560