PT-2015-7036 · Symantec · Symantec Deployment Solution+1

Steven Seeley · Published 2015-09-03 · Updated 2016-12-22 · CVE-2015-5689

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Ghost Solutions Suite (GSS) versions prior to 3.0 HF2 12.0.0.8010 Symantec Deployment Solution (DS) versions prior to 7.6 HF4 12.0.0.7045

Description The issue is related to improper sign-extend operations before array-element accesses in the ghostexp.exe component of Symantec Ghost Solutions Suite (GSS) and Symantec Deployment Solution (DS). This allows remote attackers to execute arbitrary code, cause a denial of service (application crash), or possibly obtain sensitive information via a crafted Ghost image.

Recommendations For Symantec Ghost Solutions Suite (GSS) versions prior to 3.0 HF2 12.0.0.8010, update to version 3.0 HF2 12.0.0.8010 or later. For Symantec Deployment Solution (DS) versions prior to 7.6 HF4 12.0.0.7045, update to version 7.6 HF4 12.0.0.7045 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-5689

ZDI-15-419

Affected Products

Symantec Deployment Solution

Symantec Ghost Solution Suite

References · 6

• https://zerodayinitiative.com/advisories/ZDI-15-419 · Security Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150902_00 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5689 · Security Note
• http://securitytracker.com/id/1033577 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-419 · Note
• http://securityfocus.com/bid/76498 · Note