EUVD-2009-2621

Malware in sbrugna...

CVE-2009-2627

Insecure method vulnerability in the Acer LunchApp aka AcerCtrls.APlunch ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121...

Security feature bypass

Insecure method vulnerability in the Acer LunchApp aka AcerCtrls.APlunch ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121...

CVE-2009-2627

Insecure method vulnerability in the Acer LunchApp aka AcerCtrls.APlunch ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121...

CVE-2009-2627

The CVE-2009-2627 entry covers an Insecure method vulnerability in the Acer LunchApp (AcerCtrls.APlunch) ActiveX control (acerctrl.ocx). The connected documents confirm the vulnerability arises because the Run() method can be invoked via an Implemented Categories registry key, which may cause the...

Acer LunchApp ActiveX Control fails to properly restrict access to methods

Overview The Acer LunchApp ActiveX control contains methods that can allow a remote, unauthenticated attacker to run arbitrary commands on a vulnerable system. Description The Acer LunchApp ActiveX control is provided by LunchApp.ocx. It contains a method called Run, which takes three parameters:...

Acer LunchApp.APlunch (ActiveX Control) Command Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================= Acer LunchApp.APlunch ActiveX Control Command Execution Exploit ================================================================= hahaha.Run"c",...

CVE-2006-6121

CVE-2006-6121 affects the Acer LunchApp.APlunch ActiveX control (LunchApp.ocx) shipped with notebooks. The Run() method allows an attacker to execute arbitrary commands on a vulnerable system when a page hosts the control, enabling remote code execution with the user’s privileges. Public document...