CVE Database
/

CVE-2009-1430

Back to search

CVE-2009-1430

Published: Apr 29, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2009-1204
vdb-entry
x_refsource_VUPEN
1022132
vdb-entry
x_refsource_SECTRACK
1022130
vdb-entry
x_refsource_SECTRACK
34674
vdb-entry
x_refsource_BID
symantec-msgsys-bo(50178)
vdb-entry
x_refsource_XF
34672
vdb-entry
x_refsource_BID
symantec-iao-bo(50177)
vdb-entry
x_refsource_XF
34856
third-party-advisory
x_refsource_SECUNIA
1022131
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now