CVE-2009-1119: Emc Replistor

High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow.

Affected products

• Emc Replistor: up to and including 6.2; up to and including 6.3

Published 2009-04-15. Last modified 2026-06-16.