critical9.3Public exploit code
CVE-2006-6121
Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Acer LunchApp.APlunch - ActiveX Control Command Execution2006-11-30 · remote · windows · Verified
Impact
Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acer | Lunchapp.Aplunch | All versions |
References
- NVD record
- CVE.org record
- http://global.acer.com/support/patch20070101.htm
- http://secunia.com/advisories/23003
- http://vuln.sg/acerlunchapp-en.html
- http://www.f-secure.com/weblog/archives/archive-012007.html#00001073
- http://www.kb.cert.org/vuls/id/221700
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/bid/21207
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html
- http://www.vupen.com/english/advisories/2006/4602
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30417
- http://global.acer.com/support/patch20070101.htm
- http://secunia.com/advisories/23003
- http://vuln.sg/acerlunchapp-en.html
- http://www.f-secure.com/weblog/archives/archive-012007.html#00001073
- http://www.kb.cert.org/vuls/id/221700
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/bid/21207
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html
- http://www.vupen.com/english/advisories/2006/4602
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30417