Buffer Overflow Vulnerability in VERITAS Storage Exec and StorageCentral

CVE-2005-2996

Summary

The vulnerability arises from multiple heap-based and stack-based buffer overflows found in certain DCOM server components of VERITAS Storage Exec and StorageCentral. An attacker can exploit these vulnerabilities through specially crafted ActiveX controls, potentially leading to the execution of arbitrary code on the affected system. Users running outdated versions of these products should prioritize updating to the latest hotfixes to mitigate the risk.

References