CVE-2009-1430

CVE-2009-1430 describes multiple stack-based buffer overflows in the Intel Alert Originator Service (IAO.EXE) within Symantec Alert Management System 2 (AMS2) and various Symantec security products, including Symantec AntiVirus, Client Security, and Endpoint Protection. This critical vulnerability, with a CVSS score of 9.3, allows unauthenticated remote attackers to execute arbitrary code with high impact on confidentiality, integrity, and availability. Exploitation can occur via a crafted network packet or specially formatted data appearing to originate from the MsgSys.exe process, with medium attack complexity. While not listed on CISA's KEV, a Metasploit module exists for this vulnerability, indicating readily available exploit code. Despite its severity and exploit availability, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.