This host is installed with Orbit Downloader and is prone to File Deletion ActiveX Vulnerability.

Successful exploitation will let the attacker execute arbitrary codes in a crafted webpage and trick the victim to visit the malicious link which lets the attacker execute the vulnerable code into the context of the affected remote system. Impact Level: Application

Upgrade to Orbit Downloader Version 3.0 or later, For updates refer tohttp://www.orbitdownloader.com

Bug in the 'download()' function method which lets the attacker to delete arbitrary files in the victim's computer.

Orbit Downloader 'Orbitmxt.dll' version 2.1.0.2 and prior. Workaround: Set the Killbit for the vulnerable CLSID {3F1D494B-0CEF-4468-96C9-386E2E4DEC90} http://support.microsoft.com/kb/240797

• http://xforce.iss.net/xforce/xfdb/49353

---

Updated on 2017-03-28