Symantec System Center Alert Management System (xfr.exe) Arbitrary Command Execution

Symantec System Center Alert Management System is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input, specifically with regards to the CreateProcessA function. This strike delivers an attack which is consistent with exploiting this vulnerability and achieves arbitrary command execution.