Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3 and possibly other versions before 2.8.5 allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name which is not properly handled when constructing a \Connecting\ log message.