CVE-2009-3031
Symantec Altiris Deployment Solution and Notification Server - Stack-based Buffer Overflow via BrowseAndSaveFile Method
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-3031.
PoCs published by Metasploit, Nikolas Sotiriu, Nikolas Sotiriu (lofi), including Metasploit module exploits/windows/browser/symantec_consoleutilities_browseandsavefile.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Symantec ConsoleUtilities ActiveX control via the 'BrowseAndSaveFile()' method. It delivers a payload through a malicious HTML page, leveraging a long string to overwrite the return address and execute arbitrary code.
Description
Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument.
Exploits (3)
This exploit targets a stack buffer overflow in Symantec ConsoleUtilities ActiveX control via the 'BrowseAndSaveFile()' method. It delivers a payload through a malicious HTML page, leveraging a long string to overwrite the return address and execute arbitrary code.
This Metasploit module exploits a stack-based buffer overflow in Symantec ConsoleUtilities ActiveX control via the 'BrowseAndSaveFile()' method. It delivers a payload through a malicious HTML page, leveraging a long string to overwrite the return address and execute arbitrary code.
This Metasploit module exploits a stack buffer overflow in Symantec ConsoleUtilities ActiveX control via the 'BrowseAndSaveFile()' method. It delivers a malicious HTML page with VBScript to trigger the overflow and execute arbitrary code.