CVE-2009-4225

CVE-2009-4225 describes a critical stack-based buffer overflow vulnerability in the PestPatrol ActiveX control (ppctl.dll) version 5.6.7.9, affecting CA eTrust PestPatrol. This flaw allows remote attackers to execute arbitrary code on a vulnerable system by providing an overly long argument to the Initialize method. With a CVSS score of 9.3, this vulnerability is highly severe, requiring no authentication and having a medium attack complexity, but leading to complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV, a Metasploit module exists, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.