Orbital Viewer ORB File Parsing Buffer Overflow

This module exploits a stack-based buffer overflow in David Manthey's Orbital Viewer. When processing .ORB files, data is read from file into a fixed-size stack buffer using the fscanf function. Since no bounds checking is done, a buffer overflow can occur. Attackers can execute arbitrary code by convincing their victim to open an ORB file.

Search Other Modules

Exploit Rank

• Great

Exploit Authors

• jduck < jduck [at] metasploit.com >

Vulnerability References

• BID-38436
• OSVDB-62580
• CVE-2010-0688
• http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-011...
• EDB-11581

Exploit Targets

• 0 - Orbital Viewer 1.04 on Windows XP SP3 (default)

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/fileformat/a-pdf_wav_to_mp3
• exploit/windows/fileformat/acdsee_fotoslate_string
• exploit/windows/fileformat/acdsee_xpm
• exploit/windows/fileformat/activepdf_webgrabber
• exploit/windows/fileformat/adobe_collectemailinfo
• exploit/windows/fileformat/adobe_cooltype_sing
• exploit/windows/fileformat/adobe_flashplayer_button
• exploit/windows/fileformat/adobe_flashplayer_newfunction
• exploit/windows/fileformat/adobe_flatedecode_predictor02
• exploit/windows/fileformat/adobe_geticon

Exploit Usage Information

Exploit Module Options