CVE-2009-0311

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-01-27 · updated 2026-06-16
Weakness: CWE-20

Description

The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer.

Affected products

EMC Autostart: through 5.3; 5.3

References

http://osvdb.org/51566
http://secunia.com/advisories/33667
http://www.securityfocus.com/archive/1/500350/100/0/threaded
http://www.securityfocus.com/bid/33415
http://www.securitytracker.com/id?1021636
http://zerodayinitiative.com/advisories/ZDI-09-009/
https://exchange.xforce.ibmcloud.com/vulnerabilities/48197
http://osvdb.org/51566
http://secunia.com/advisories/33667
http://www.securityfocus.com/archive/1/500350/100/0/threaded
http://www.securityfocus.com/bid/33415
http://www.securitytracker.com/id?1021636

Get alerted when CVE-2009-0311 or the next vulnerability affects your stack