CVE-2009-3031

HighPublished

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in...

Published: Nov 3, 2009
Updated: Aug 7, 2024
Assigning CNA: mitre
Evidence observed: Nov 2, 2009

Primary CVSS

9.3/ 10High

nvd · CVSS 2.0

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS probability estimate

45.4%

Moderate · next 30 days

Percentile: 98.8%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument.

Sources

Symantec ConsoleUtilities - ActiveX Buffer Overflow (Metasploit)Exploit
Nikolas Sotiriu · windows · Nov 2, 2009
Symantec ConsoleUtilities - ActiveX Control Buffer Overflow (Metasploit)Exploit
Metasploit · windows · Nov 11, 2010

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.