CVE-2009-4225

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 31%

from disclosure to weapon338 days

Published on NVDDec 8

1st PoC+338d

metasploitNov 2

exploitation probability

31%top 2% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16630unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/54458 http://www.fortiguard.com/encyclopedia/vulnerability/ca.etrust.pestpatrol.ppctl.dll.activex.access.html http://www.metasploit.com/redmine/projects/framework/repository/revisions/7167/entry/modules/exploits/windows/fileformat/etrust_pestscan.rb http://www.securityfocus.com/bid/37133