CVE-2009-2627

Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121.

• CWE-94

• http://osvdb.org/57201
• http://secunia.com/advisories/36343Vendor Advisory
• http://www.kb.cert.org/vuls/id/485961US Government Resource
• http://www.securityfocus.com/bid/36068
• http://www.securitytracker.com/id?1022752
• http://www.vupen.com/english/advisories/2009/2299Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52592
• http://osvdb.org/57201
• http://secunia.com/advisories/36343Vendor Advisory
• http://www.kb.cert.org/vuls/id/485961US Government Resource
• http://www.securityfocus.com/bid/36068
• http://www.securitytracker.com/id?1022752
• http://www.vupen.com/english/advisories/2009/2299Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52592

Published

Aug 19, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2620src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 be…
• CVE-2009-2621Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does…
• CVE-2009-2622Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allo…
• CVE-2009-2624The huft_build function in inflate.c in gzip before 1.3.13 c…
• CVE-2009-2625XMLScanner.java in Apache Xerces2 Java, as used in Sun Java …
• CVE-2009-2626The zend_restore_ini_entry_cb function in zend_ini.c in PHP …
• CVE-2009-2628The VMnc media codec in vmnc.dll in VMware Movie Decoder bef…
• CVE-2009-2629Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0…
• CVE-2009-2631Multiple clientless SSL VPN products that run in web browser…
• CVE-2009-2632Buffer overflow in the SIEVE script component (sieve/script.…
• CVE-2009-2633PHP remote file inclusion vulnerability in toolbar_ext.php i…
• CVE-2009-2634PHP remote file inclusion vulnerability in toolbar_ext.php i…