Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.900755
Categoría:Buffer overflow
Título:Orbital Viewer File Processing Buffer Overflow Vulnerabilities
Resumen:Orbital Viewer is prone to buffer overflow vulnerabilities.
Descripción:Summary:
Orbital Viewer is prone to buffer overflow vulnerabilities.

Vulnerability Insight:
The flaws are due to an error within the processing of '.orb' and '.ov' files
which can be exploited to cause a stack-based buffer overflow when a user is
tricked into opening a specially crafted '.orb' or '.ov' file.

Vulnerability Impact:
Successful exploitation will allow attackers to cause a buffer
overflow and execute arbitrary code on the system by tricking a user into
opening a malicious file or cause the affected application to crash.

Affected Software/OS:
Orbital Viewer version 1.04.

Solution:
No known solution was made available for at least one year since the disclosure
of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer
release, disable respective features, remove the product or replace the product by another one.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2010-0688
BugTraq ID: 38436
http://www.securityfocus.com/bid/38436
BugTraq ID: 40985
http://www.securityfocus.com/bid/40985
http://www.exploit-db.com/exploits/13940
http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-011-orbital-viewer-orb-buffer-overflow/
http://www.osvdb.org/62580
http://secunia.com/advisories/38720
http://www.vupen.com/english/advisories/2010/0478
XForce ISS Database: orbitalviewer-ov-bo(59560)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59560
CopyrightCopyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.