Description
Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls.
References
- VU#620497 third-party-advisory
- VU#927793 third-party-advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2005.09.19.html
- 16871 third-party-advisory