CVE-2009-4643: Juniper Odyssey Access Client

High severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICE_CMD_UNINSTALL command to the NeoterisSetupService named pipe.

Affected products

• Juniper Odyssey Access Client: version 4.72.11421.0 only

Published 2010-02-15. Last modified 2026-06-16.