CVE-2009-2570: Symantec Winfax Pro

High severity, CVSS 9.3. EPSS: 11.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method.

Affected products

• Symantec Winfax Pro: version 10.03 only

Published 2009-07-22. Last modified 2026-06-16.