Unscored severity · published Jul 10, 2007
CVE-2007-3666
Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function
–
CVSS
3%
EPSS
No
On KEV
Description
Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NG
Norton Ghost · Symantec
12.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3666
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3666
osvdb.org
http://osvdb.org/43961
Vendor Advisory
http://www.eleytt.com/advisories/eleytt_GHOST2.pdf
www.securityfocus.com
http://www.securityfocus.com/archive/1/473187
www.securityfocus.com
http://www.securityfocus.com/archive/1/473212
www.securityfocus.com
http://www.securityfocus.com/bid/24825
More from Norton Ghost
5.5
CVE-2011-3477
GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton…
–
CVE-2009-1517
Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow…
–
CVE-2007-3665
Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the…
–
CVE-2007-3132
Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service…
–
CVE-2007-2360
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured,…