CVE-2009-2570

Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method.

• CWE-119

• http://osvdb.org/54137
• http://retrogod.altervista.org/9sg_symantec_win_fuck_pro.html
• http://secunia.com/advisories/34925Vendor Advisory
• http://www.securityfocus.com/archive/1/503074/100/0/threaded
• http://www.securityfocus.com/archive/1/503086/100/0/threaded
• http://www.securityfocus.com/archive/1/503163/100/0/threaded
• http://www.securityfocus.com/bid/34766Exploit
• http://www.securitytracker.com/id?1022147Exploit
• http://www.vupen.com/english/advisories/2009/1221Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008
• http://osvdb.org/54137
• http://retrogod.altervista.org/9sg_symantec_win_fuck_pro.html
• http://secunia.com/advisories/34925Vendor Advisory
• http://www.securityfocus.com/archive/1/503074/100/0/threaded
• http://www.securityfocus.com/archive/1/503086/100/0/threaded
• http://www.securityfocus.com/archive/1/503163/100/0/threaded
• http://www.securityfocus.com/bid/34766Exploit
• http://www.securitytracker.com/id?1022147Exploit
• http://www.vupen.com/english/advisories/2009/1221Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008

Published

Jul 22, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2564NOS Microsystems getPlus Download Manager, as used in Adobe …
• CVE-2009-2565Cross-site scripting (XSS) vulnerability in Perl CGI's By Mr…
• CVE-2009-2566Stack-based buffer overflow in TFM MMPlayer 2.0, and possibl…
• CVE-2009-2567SQL injection vulnerability in the Almond Classifieds (com_a…
• CVE-2009-2568Stack-based buffer overflow in Sorinara Streaming Audio Play…
• CVE-2009-2569Multiple cross-site scripting (XSS) vulnerabilities in Verli…
• CVE-2009-2571Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2009-2572Cross-site request forgery (CSRF) vulnerability in the Fives…
• CVE-2009-2573Multiple SQL injection vulnerabilities in MiniTwitter 0.2 be…
• CVE-2009-2574index.php in MiniTwitter 0.2 beta allows remote authenticate…
• CVE-2009-2575The Research In Motion (RIM) BlackBerry 8800 allows remote a…
• CVE-2009-2576Microsoft Internet Explorer 6.0.2900.2180 and earlier allows…