CVE-2005-2996: Symantec Veritas Storage Exec

High severity, CVSS 7.5. EPSS: 5.6% chance of exploitation in the next 30 days.

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls.

Affected products

• Symantec Veritas Storage Exec: version 5.3_rev._2190r only
• Symantec Veritas Storagecentral: version 5.2_rev._2190r only

Published 2005-09-20. Last modified 2026-06-16.