CVE-2009-2627: Code Injection

Published Aug 19, 2009

Updated

Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121.

Affected Software

1 affected component

Acer LunchApp.APlunch

Event History

Aug 19, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2627?

CVE-2009-2627 is classified as a critical vulnerability due to its potential for arbitrary command execution.

How do I fix CVE-2009-2627?

To mitigate CVE-2009-2627, users should uninstall the Acer LunchApp or apply any patches provided by Acer.

What types of attacks can exploit CVE-2009-2627?

CVE-2009-2627 can be exploited through remote code execution attacks via the insecure Run method in the ActiveX control.

What versions of Acer LunchApp are affected by CVE-2009-2627?

CVE-2009-2627 affects all versions of the Acer LunchApp ActiveX control identified as acerctrl.ocx.

Is user interaction required to exploit CVE-2009-2627?

Yes, user interaction is typically required for exploitation of CVE-2009-2627, as the ActiveX control must be initialized.