CVE-2009-1567

Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost property value.

• CWE-119

• http://secunia.com/advisories/37138Vendor Advisory
• http://secunia.com/advisories/37492Vendor Advisory
• http://secunia.com/secunia_research/2009-41/Vendor Advisory
• http://www.securityfocus.com/archive/1/508169/100/0/threaded
• http://www.securityfocus.com/bid/37187
• http://www.vupen.com/english/advisories/2009/3376Vendor Advisory
• http://www.vupen.com/english/advisories/2009/3377
• http://secunia.com/advisories/37138Vendor Advisory
• http://secunia.com/advisories/37492Vendor Advisory
• http://secunia.com/secunia_research/2009-41/Vendor Advisory
• http://www.securityfocus.com/archive/1/508169/100/0/threaded
• http://www.securityfocus.com/bid/37187
• http://www.vupen.com/english/advisories/2009/3376Vendor Advisory
• http://www.vupen.com/english/advisories/2009/3377

Published

Dec 3, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1560The Cisco Linksys WVC54GCA wireless video camera with firmwa…
• CVE-2009-1561Cross-site request forgery (CSRF) vulnerability in administr…
• CVE-2009-1563Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-1564Heap-based buffer overflow in vmnc.dll in the VMnc media cod…
• CVE-2009-1565vmnc.dll in the VMnc media codec in VMware Movie Decoder bef…
• CVE-2009-1566Integer overflow in Roxio Easy Media Creator 9.0.136, and Ro…
• CVE-2009-1568Stack-based buffer overflow in ienipp.ocx in Novell iPrint C…
• CVE-2009-1569Multiple stack-based buffer overflows in Novell iPrint Clien…
• CVE-2009-1570Integer overflow in the ReadImage function in plug-ins/file-…
• CVE-2009-1571Use-after-free vulnerability in the HTML parser in Mozilla F…
• CVE-2009-1572The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows r…
• CVE-2009-1573xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and p…