Orbit Downloader Connecting Log Message Buffer Overflow Exploit

The application is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Specifically, this issue occurs when the application creates a Connecting log message. An attacker can exploit this issue by enticing a vulnerable user into connecting to a malicious HTTP server or opening a specially crafted URI that contains an excessively long hostname. This module runs a web server waiting for vulnerable clients (Orbit Downloader in Mozilla Firefox) to connect to it. When the client connects, it will try to install an agent by exploiting this vulnerability.