Unrated severityNVD Advisory· Published May 11, 2009· Updated Apr 23, 2026

CVE-2009-1606

Description

Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow remote attackers to execute arbitrary code via long (1) baseurl, (2) kommune, (3) felter, (4) afdeling, (5) Flags, (6) HelpURL, (7) caburl, or (8) filename properties; or (9) a long argument to the Open method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Dafolo/Dafolocontrol
cpe:2.3:a:dafolo:dafolocontrol:1.108.6:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/35017nvdVendor Advisory
www.securityfocus.com/bid/34900nvd
exchange.xforce.ibmcloud.com/vulnerabilities/50420nvd
exchange.xforce.ibmcloud.com/vulnerabilities/50421nvd
exchange.xforce.ibmcloud.com/vulnerabilities/50422nvd
exchange.xforce.ibmcloud.com/vulnerabilities/50423nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000