CVE-2009-2627: Acer Lunchapp.aplunch

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121.

Affected products

• Acer Lunchapp.aplunch: any version

Published 2009-08-19. Last modified 2026-06-16.