CVE-2009-3033: Symantec Altiris Deployment Solution

High severity, CVSS 9.3. EPSS: 40% chance of exploitation in the next 30 days.

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.

Affected products

• Symantec Altiris Deployment Solution: version 6.9 only; version 6.9.164 only; version 6.9.176 only; version 6.9.355 only
• Symantec Altiris Management Platform: version 7.0 only
• Symantec Altiris Notification Server: version 6.0 only; version 6.0_sp3 only

Published 2009-11-25. Last modified 2026-06-16.