NVD

Id
48706  
Name
CVE-2009-1430  
Description
Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-29  
Modified Date
2013-02-06  
Seq
2009-1430  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246058 48706 CVE-2009-1430 20090428 ZDI-09-018: Symantec Client Security Alert Originator Service Stack Overflow Vulnerability  View
246059 48706 CVE-2009-1430 34672  View
246060 48706 CVE-2009-1430 34674  View
246061 48706 CVE-2009-1430 1022130  View
246062 48706 CVE-2009-1430 1022131  View
246063 48706 CVE-2009-1430 1022132  View
246064 48706 CVE-2009-1430 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02  View
246065 48706 CVE-2009-1430 ADV-2009-1204  View
246066 48706 CVE-2009-1430 http://www.zerodayinitiative.com/advisories/ZDI-09-018/  View
246067 48706 CVE-2009-1430 symantec-iao-bo(50177)  View
246068 48706 CVE-2009-1430 symantec-msgsys-bo(50178)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44953 JVNDB-2009-005960 SSS などで使用される AMS の IAO.EXE におけるスタックベースのバッファオーバーフローの脆弱性 Symantec System Center (SSS)、Symantec AntiVirus Server、Symantec AntiVirus Central Quarantine Server、Symantec AntiVirus (SAV) Corporate Edition、Symantec Client Security (SCS)、および Symantec Endpoint Protection (SEP) で使用される Symantec Alert Management System (AMS) の Intel Alert Originator Service の IAO.EXE には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-1430 38861 CVE-2009-1430 48706 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005960.html 2009-04-28 2012-12-20 View