Backup Exec System Recovery 2010 and Symantec System Recovery 2010 are susceptible to potential all loading due to improper path restrictions in system file directories. Successful exploitation could result in an attacker being able to execute arbitrary code with logged-in user permissions.