CVE-2009-1431

CVE-2009-1431 describes a critical remote code execution vulnerability in the XFR.EXE component of the Intel File Transfer service within various Symantec products, including Symantec AntiVirus, Client Security, and Endpoint Protection. An unauthenticated remote attacker can exploit this by tricking the service into executing arbitrary code placed on a network share or WebDAV server. With a CVSS score of 9.3, this vulnerability is highly severe due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no active exploitation, Metasploit modules, or ExploitDB entries are publicly known, and community discussion is minimal, the high FAUCET Risk Score of 96/100 indicates its significant potential danger.