危険度: 緊急
  CVE識別番号: CVE-2009-3031
  情報公開日: 7 21, 2015

  概要

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument.

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1003805
  Trend Micro Deep Security DPI Rule Name: 1003805 - Symantec Altiris Products ActiveX Control Buffer Overflow

  影響を受けるソフトウェア

  • symantec altiris_deployment_solution 6.9
  • symantec altiris_management_platform 7.0
  • symantec altiris_notification_server 6.0
  • symantec altiris_notification_server 7.0