CVE-2007-3509: Symantec Veritas Backup Exec

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute arbitrary code via crafted ncacn_ip_tcp requests.

Affected products

• Symantec Veritas Backup Exec: version 10.0 only; version 10d only; version 11d only

Published 2007-07-12. Last modified 2026-06-16.