Vulnerability Details : CVE-2015-5689
ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code, cause a denial of service (application crash), or possibly obtain sensitive information via a crafted Ghost image.
Vulnerability category: OverflowExecute codeDenial of service
Products affected by CVE-2015-5689
- cpe:2.3:a:symantec:ghost_solutions_suite:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:ghost_solutions_suite:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:ghost_solutions_suite:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:ghost_solutions_suite:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:ghost_solutions_suite:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:ghost_solutions_suite:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:ghost_solutions_suite:1.1:p2:*:*:*:*:*:*
- cpe:2.3:a:symantec:deployment_solution:6.9:sp3:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-5689
14.57%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 96 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-5689
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
CWE ids for CVE-2015-5689
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-5689
-
http://www.securityfocus.com/bid/76498
Symantec Ghost Explorer Utility Out of Bounds Array Indexing Memory Corruption Vulnerability
-
http://www.securitytracker.com/id/1033577
Symantec Ghost Solutions Suite Array Index Overflow in Processing Files Lets Remote Users Execute Arbitrary Code - SecurityTracker
-
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150902_00
Symantec Ghost Explorer Utility Tool Out-of-Bounds Array IndexingVendor Advisory
-
http://zerodayinitiative.com/advisories/ZDI-15-419/
ZDI-15-419 | Zero Day Initiative
Jump to