Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-2627

EPSS 1.66% · P82
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-2627

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Acer AcerCtrls.APlunch ActiveX控件不安全方式调用漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AcerCtrls.APlunch是Acer笔记本默认所捆绑的一个ActiveX控件。 AcerCtrls.APlunch ActiveX控件(acerctrl.ocx)中包含有一个名为Run()的调用方式，该方式会取Drive和FileName两个参数。尽管这个控件本身没有通过IObjectSafety接口标记为safe for scripting，但通过适当的Implemented Categories注册表键发布可能导致将其标记为safe for scripting。这意味着在Internet Ex
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-2627

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2627

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-08-19 · 21 CVEs total

CVE-2008-7006Phpversion Free PHP VX Guestbook 'admin/backupdb.php'授权问题漏洞
CVE-2008-7015Unreal Engine Failed Memory Allocation 远程拒绝服务漏洞
CVE-2008-7014fhttpd HTTP头 未明漏洞
CVE-2008-7013Baidu Hi IM 数字错误漏洞
CVE-2008-7012Accellion File Transfer Appliance FTA 未明漏洞
CVE-2008-7011Unreal engine 文件下载 拒绝服务攻击漏洞
CVE-2008-7010SkaLinks Exchange Script 'admin/register.php'创建账号访问验证漏洞
CVE-2008-7009Checkpoint ZoneAlarm Internet安全套件multiscan.exe缓冲区溢出漏洞
CVE-2008-7008HyperStop Web Host Directory 认证绕过漏洞
CVE-2008-7007Phpversion Free PHP VX Guestbook认证绕过漏洞
CVE-2009-0682ca internet_security_suite r3 输入验证漏洞
CVE-2008-7005minb 'quote.php'PHP代码注入漏洞
CVE-2008-7004Elog Electronic Logbook 缓冲区溢出漏洞
CVE-2009-2860IBM DB2 安全漏洞
CVE-2009-2859IBM DB2 权限许可和访问控制问题漏洞
CVE-2009-2858IBM DB2 资源管理错误漏洞
CVE-2009-2857Sun Solaris文件系统与虚拟内存子系统交互拒绝服务漏洞
CVE-2009-2740CA HIPS kmxIds.sys驱动拒绝服务漏洞
CVE-2009-2055Cisco IOS XR软件BGP更新拒绝服务漏洞
CVE-2009-1884Perl 数字错误漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-2627

No comments yet

Leave a comment