CVEvulnerability
CVE-2009-1606
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-05-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow remote attackers to execute arbitrary code via long (1) baseurl, (2) kommune, (3) felter, (4) afdeling, (5) Flags, (6) HelpURL, (7) caburl, or (8) filename properties; or (9) a long argument to the Open method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
• dafolo dafolocontrol 1.108.6
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/35017 Vendor Advisory
- http://www.securityfocus.com/bid/34900 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50420 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50421 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50422 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50423 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/35017 Vendor Advisory
- http://www.securityfocus.com/bid/34900 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50420 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50421 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50422 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50423 exchange.xforce.ibmcloud.com