Multiple Integer Overflows in Veritas Storage Solutions by Symantec

CVE-2011-0547

Summary

Multiple integer overflow vulnerabilities exist in the vxsvc.exe component of Symantec's Veritas Enterprise Administrator service. These vulnerabilities affect various versions of Veritas Storage Foundation, including its Cluster File Systems and NetBackup PureDisk. Remote attackers can exploit these weaknesses through crafted Unicode and ASCII strings or specially formed values, particularly affecting the vxveautil.value_binary_unpack and vxveautil.kv_binary_unpack functions. Successful exploitation could allow attackers to execute arbitrary code, leading to potential data compromise and unauthorized access.

References