Unscored severity · published Sep 20, 2015
CVE-2015-5689
ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs…
–
CVSS
3.4%
EPSS
No
On KEV
Description
ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code, cause a denial of service (application crash), or possibly obtain sensitive information via a crafted Ghost image.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Deployment Solution · Symantec
6.9 · source: NVD
GS
Ghost Solutions Suite · Symantec
1.0; 1.1; 1.1; 2.0; 2.0.1; 2.0.2; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5689
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5689
www.securityfocus.com
http://www.securityfocus.com/bid/76498
www.securitytracker.com
http://www.securitytracker.com/id/1033577
Vendor Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150902_00
zerodayinitiative.com
http://zerodayinitiative.com/advisories/ZDI-15-419/
More from Deployment Solution
–
CVE-2014-7286
Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors