Symantec Altiris Management Platform vulnerabilities

2 CVEs affecting Symantec Altiris Management Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3033, published 2009-11-25.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-3031, published 2009-11-03. High severity, CVSS 9.3. EPSS: 45.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server…
• CVE-2009-3033, published 2009-11-25. High severity, CVSS 9.3. EPSS: 40% chance of exploitation in the next 30 days. Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris…