CVE-2010-2104

CVE-2010-2104 concerns Orbit Downloader versions 3.0.0.4 and 3.0.0.5 . The vulnerability is a directory traversal in a metalink file’s name attribute of a file element, enabling a user‑assisted remote attacker to write arbitrary files. The NVD description specifies the impact as write access with...