CVE:CVE-2009-3031
CNNVD:CNNVD-200911-021
Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。  
Symantec Altiris Notification Server (NS) R12版本之前的6.0版本, Symantec Altiris Deployment Solution 6.9 SP3的Deployment Server 6.8版本和6.9版本,以及Symantec Management Platform (SMP) SP3版本之前的7.0版本中的Altiris eXpress NS ConsoleUtilities ActiveX 控件 6.0.0.1846（AeXNSConsoleUtilities.dll）中的BrowseAndSaveFile函数存在栈缓冲区溢出。如果用户受骗访问了恶意网页，远程攻击者可以向BrowseAndSaveFile函数的第二个参数传入一个超长字符串，导致执行任意代码。
solution:Upgrade symantec altiris_deployment_solution to a higher version than 6.9,6.9:sp1,6.9:sp2,6.9:sp3,and avoid the version 6.9,6.9:sp1,6.9:sp2,6.9:sp3; Upgrade symantec altiris_management_platform to a higher version than 7.0,7.0:sp1,and avoid the version 7.0,7.0:sp1; Upgrade symantec altiris_notification_server to a higher version than 6.0,6.0:sp2,6.0:sp3,6.0:sp3_r7,7.0,7.0:sp3,and avoid the version 6.0,6.0:sp2,6.0:sp3,6.0:sp3_r7,7.0,7.0:sp3