CVE-2009-3031
Summary
| CVE | CVE-2009-3031 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-11-03 16:30:00 UTC |
| Updated | 2018-10-10 19:43:00 UTC |
| Description | Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Patch, Vendor Advisory |
| NSOADV-2009-001 | MISC | sotiriu.de | Exploit |
| Security Advisories Relating to Symantec Products - Symantec Altiris Deployment Solution and Notification Server Management Web Console Browse and Save File ActiveX Overflow - 2009-11-02T10:27:39 PST | Symantec | CONFIRM | www.symantec.com | |
| Multiple Symantec Altiris Products ActiveX Control Buffer Overflow Vulnerability | BID | www.securityfocus.com | Exploit, Patch |
| kb.altiris.com/article.asp | CONFIRM | kb.altiris.com | Vendor Advisory |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| kb.altiris.com/article.asp | CONFIRM | kb.altiris.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.