CVE-2009-3033 in the critical feed json
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web co…
published 2009-11-25 16 y ago modified 2026-06-16 4 mo ago also EUVD-2009-3017
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 40.0%
- EPSS 40.0% chance of exploitation in 30 days, percentile 98%
- public exploits
- 2
- Metasploit, Exploit-DB
Summary
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.
Patch / fix
Timeline
- First public exploit (Metasploit exploit/windows/browser/symantec_altirisdeployment_runcmd)
- Published
Exploit prediction
39.97% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/windows/browser/symantec_altirisdeployment_runcmd Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow metasploit exploit, normal rank, 2009-11-04
- EDB-16528 Symantec Altiris Deployment Solution - ActiveX Control Buffer Overflow (Metasploit) remote, 2010-05-09
- securityfocus.com http://www.securityfocus.com/bid/37092 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
securityfocus.com
/bid/37092
vdb-entry, exploit, patch
-
kb.altiris.com
/article.asp?article=50279&p=1
patch, vendor-advisory
-
vupen.com
/english/advisories/2009/3328
vdb-entry, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/54415
vdb-entry
- kb.altiris.com /article.asp?article=50072&p=1
- symantec.com /security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=2009
-
osvdb.org
/60496
vdb-entry
Sources
- CVE List CVE-2009-3033
- NVD CVE-2009-3033
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.