Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

CycloScopeLite 2.50.3.0 can let attackers run code remotely

CVE-2009-1666 · published 17 years ago
Summary

The CycloScopeLite version 2.50.3.0 contains flaws in several of its internal files that could let a remote user execute their own programs on your system. This could give an attacker control over the computer running the software, potentially exposing your data or disrupting operations. Apply any patches from the vendor as soon as they are available and restrict network access to the application until it is updated.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cyclomedia cycloscopelite 2.50.3.0
cpe:2.3:a:cyclomedia:cycloscopelite:2.50.3.0:*:*:*:*:*:*:*
Original advisory text
Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnConnection method in (1) CM_ADOConnection.dll, (2) CM_Addre...
Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnConnection method in (1) CM_ADOConnection.dll, (2) CM_AddressInfoDBC.dll, and (3) CM_RecordingLocationDBC.dll, related to improper dereferencing. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
3% chance of attack within 30 days
Timeline
Published18 May 2009
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2009-1666 · NVD
Track software like this
Free during beta