CVE-2009-2570 – Symantec Fax Viewer Control 10 - 'DCCFAXVW.dll' Remote Buffer Overflow

https://notcve.org/view.php?id=CVE-2009-2570

Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method. Desbordamiento de búfer basado en pila en Symantec.FaxViewerControl.1 ActiveX control en WinFax\DCCFAXVW.DLL en Symantec WinFax Pro v10.03, permite a atacantes remotos ejecutar código de su elección mediante una argumento largo en el método AppendFax. • https://www.exploit-db.com/exploits/8562 http://osvdb.org/54137 http://retrogod.altervista.org/9sg_symantec_win_fuck_pro.html http://secunia.com/advisories/34925 http://www.securityfocus.com/archive/1/503074/100/0/threaded http://www.securityfocus.com/archive/1/503086/100/0/threaded http://www.securityfocus.com/archive/1/503163/100/0/threaded http://www.securityfocus.com/bid/34766 http://www.securitytracker.com/id?1022147 http://www.vupen.com/english/advisories/2009 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •