Security feature bypass

Insecure method vulnerability in the Acer LunchApp aka AcerCtrls.APlunch ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121...

CVE-2009-2627

The CVE-2009-2627 entry covers an Insecure method vulnerability in the Acer LunchApp (AcerCtrls.APlunch) ActiveX control (acerctrl.ocx). The connected documents confirm the vulnerability arises because the Run() method can be invoked via an Implemented Categories registry key, which may cause the...

CVE-2009-2627

Insecure method vulnerability in the Acer LunchApp aka AcerCtrls.APlunch ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121...

CVE-2009-2627: Improper Control of Generation of Code

Insecure method vulnerability in the Acer LunchApp aka AcerCtrls.APlunch ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121...

Acer AcerCtrls.APlunch ActiveX Control fails to properly restrict access to methods

Overview The Acer AcerCtrls.APlunch ActiveX control contains methods that can allow a remote, unauthenticated attacker to run arbitrary commands on a vulnerable system. Description The Acer AcerCtrls.APlunch ActiveX control is provided by acerctrl.ocx. It contains a method called Run, which takes...

Insufficient Authentication vulnerability in Acer notebooks (English)

Hello SecurityFocus! I want to warn you about vulnerability in Acer notebooks. It's Insufficient Authentication vulnerability. Which I found 28.04.2009 in two my notebooks. At these notebooks Windows XP Home Rus is using, in case of other OS the vulnerability can be also present. In Windows XP Ho...

Acer notebooks weak passwords

Administrator system account has empty password and password is not reset during initial system account setup...

Insufficient Authentication vulnerability in Acer notebooks

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Authentication уязвимости в ноутбуках Acer. Уязвимость я обнаружил 28.04.2009 на двух моих ноутбуках. На данных ноутбуках используется Windows XP Home Rus, в случае других ОС уязвимость также может присутствовать. В Windows XP Home в...

MDVA-2008:073 : hal-info

This package adds quirks to fix suspend/resume on Airis Kira, Asus EEE PC. It also ensure fake CDROM on Option/Huawei 3G keys are ignored, and fix Delete key not working properly on Acer Extensa 5220. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:224-1)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, whic...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:032)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop by making two calls to svclisten for the same socket, and then reading a...

Mandriva Update for kernel MDVSA-2008:224 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:224 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for hal-info MDVA-2008:073 (hal-info)

Check for the Version of hal-info OpenVAS Vulnerability Test Mandriva Update for hal-info MDVA-2008:073 hal-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for hal-info MDVA-2008:073 (hal-info)

Check for the Version of hal-info OpenVAS Vulnerability Test Mandriva Update for hal-info MDVA-2008:073 hal-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CyberLink PowerDVD CreateNewFile Arbitrary Remote Rewrite DoS

No description provided by source. !-- CyberLink PowerDVD CLAVSetting Module CLAVSetting.DLL 1.00.1829 arbitrary remote rewrite dos this is installed by default on Acer Travelmate series allows to overwrite files with an empty one extension doesn't matter object safety report: RegKey Safe for...

cyberlink-dos.txt

CLSetting.CreateNewFile "................\boot.ini"...

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service CLSetting.CreateNewFile "................\boot.ini" milw0rm.com 2007-10-01...

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CLSetting.CreateNewFile "................\boot.ini" milw0rm.com 2007-10-01...

Acer LunchApp.APlunch ActiveX Arbitrary Command Execution

The remote host contains an ActiveX control from Acer called LunchApp.APlunch that is reportedly shipped with notebook computers from that manufacturer and is marked as 'safe for scripting' and 'safe for initializing from persistent data'. By tricking a user on the affected host into visiting a...

Acer LunchApp ActiveX Control fails to properly restrict access to methods

Overview The Acer LunchApp ActiveX control contains methods that can allow a remote, unauthenticated attacker to run arbitrary commands on a vulnerable system. Description The Acer LunchApp ActiveX control is provided by LunchApp.ocx. It contains a method called Run, which takes three parameters:...