Buffer overflow in Symantec Ghost_solutions_suite

CVE-2012-0306

Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted backup file.

Vulnerability class: Buffer Overflow

EPSS: 0.033 (87.0th percentile) — read the EPSS interpretation.

Affected products

Symantec Ghost_solutions_suite — versions 2.0, 2.0.0, 2.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)