CVE-2008-6827: The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9...

Security readout for executives and security teams

This is an old local privilege escalation in Symantec Altiris Deployment Solution 6.x client software. A user already on an affected Windows endpoint could potentially make the Altiris client run commands with SYSTEM privileges. It is not described as remotely exploitable in the provided sources. Exposure is likely limited to Windows endpoints still running Symantec Altiris Deployment Solution 6.x client GUI versions earlier than 6.9.355 SP1. Modern environments may only be exposed if legacy Altiris agents remain installed. Prioritize remediation where affected Altiris agents exist on shared workstations, administrator jump boxes, or servers. The vulnerability requires local access, but successful abuse can fully compromise the endpoint through SYSTEM privileges. Mitigation focus: Upgrade affected Altiris Deployment Solution clients to 6.9.355 SP1 or later.; Remove legacy Altiris client software where it is no longer operationally required.; Restrict local interactive access on systems where affected clients remain installed..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.