Unrated severityNVD Advisory· Published Sep 20, 2005· Updated Jun 16, 2026
CVE-2005-2996
CVE-2005-2996
Description
Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:symantec_veritas:storagecentral:5.2_rev._2190r:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:symantec_veritas:storagecentral:5.2_rev._2190r:*:*:*:*:*:*:*
- (no CPE)range: 5.2 before Hot Fix 2
cpe:2.3:a:symantec_veritas:storage_exec:5.3_rev._2190r:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:symantec_veritas:storage_exec:5.3_rev._2190r:*:*:*:*:*:*:*
- (no CPE)range: 5.3 before Hotfix 9
Patches
Vulnerability mechanics
References
4- secunia.com/advisories/16871nvdPatchVendor Advisory
- www.kb.cert.org/vuls/id/620497nvdPatchThird Party AdvisoryUS Government Resource
- www.kb.cert.org/vuls/id/927793nvdPatchThird Party AdvisoryUS Government Resource
- securityresponse.symantec.com/avcenter/security/Content/2005.09.19.htmlnvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.