Intrusion PreventionSymantec.Altiris.Deployment.ActiveX.Downloadandinstall.Access
Description
This indicates an attempt to exploit a code execution vulnerability in Symantec Altiris Deployment Solution.
The vulnerability is located in the "AeXNSPkgDLLib.dll" ActiveX control through miss-use of "DownloadAndInstall" method. It may allow remote attackers to download and install arbitrary files in vulnerable systems.
Affected Products
Symantec Altiris Deployment Solution 6.9 sp3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Set the kill bit for the affected ActiveX control.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17723 |
| Created | Sep 29, 2009 |
| Updated | Nov 04, 2021 |
| Risk |
|
| CVE ID | CVE-2009-3028 CVE-2009-3179 |
| Exploit Prediction Score | 72.8% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |