Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Storage_exec | Symantec_veritas | 5.3_rev._2190r (including) | 5.3_rev._2190r (including) |
| Storagecentral | Symantec_veritas | 5.2_rev._2190r (including) | 5.2_rev._2190r (including) |