Lucene search

K
saintSAINT CorporationSAINT:C141C1B3996353154D929F09AD2A4C5D
HistoryMar 24, 2010 - 12:00 a.m.

Orbital Viewer buffer overflow

2010-03-2400:00:00
SAINT Corporation
download.saintcorporation.com
13

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.94

Percentile

99.2%

Added: 03/24/2010
CVE: CVE-2010-0688
BID: 38436
OSVDB: 62580

Background

Orbital Viewer is a program for viewing atomic and molecular orbitals.

Problem

A buffer overflow vulnerability in Orbital Viewer allows command execution when a user opens a specially crafted .orb file.

Resolution

Do not open .orb files from unknown sources.

References

<http://secunia.com/advisories/38720&gt;

Limitations

Exploit works on Orbital Viewer 1.04 and requires a user to open the exploit file in Orbital Viewer.

Platforms

Windows

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.94

Percentile

99.2%