CVE-2015-5689

Опубликовано: 20 сент. 2015

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code, cause a denial of service (application crash), or possibly obtain sensitive information via a crafted Ghost image.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec:deployment_solution:6.9:sp3:*:*:*:*:*:*

cpe:2.3:a:symantec:ghost_solutions_suite:1.0:*:*:*:*:*:*:*

cpe:2.3:a:symantec:ghost_solutions_suite:1.1:*:*:*:*:*:*:*

cpe:2.3:a:symantec:ghost_solutions_suite:1.1:p2:*:*:*:*:*:*

cpe:2.3:a:symantec:ghost_solutions_suite:2.0:*:*:*:*:*:*:*

cpe:2.3:a:symantec:ghost_solutions_suite:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:symantec:ghost_solutions_suite:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:symantec:ghost_solutions_suite:2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-rggv-cpx8-vv74

github

больше 3 лет назад