CVE-2012-0306

2012-10-1817:55:01

CWE-119

[email protected]

web.nvd.nist.gov

symantec

ghost solution suite

cve-2012-0306

remote attack

memory corruption

vulnerability

7.9 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON

Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted backup file.

Affected configurations

NVD

Node

symantecghost_solutions_suiteMatch2.0

symantecghost_solutions_suiteMatch2.0.0

symantecghost_solutions_suiteMatch2.0.1

symantecghost_solutions_suiteMatch2.5

CPENameOperatorVersion
symantec:ghost_solutions_suitesymantec ghost solutions suiteeq2.0
symantec:ghost_solutions_suitesymantec ghost solutions suiteeq2.0.0
symantec:ghost_solutions_suitesymantec ghost solutions suiteeq2.0.1
symantec:ghost_solutions_suitesymantec ghost solutions suiteeq2.5

CPE	Name	Operator	Version
symantec:ghost_solutions_suite	symantec ghost solutions suite	eq	2.0
symantec:ghost_solutions_suite	symantec ghost solutions suite	eq	2.0.0
symantec:ghost_solutions_suite	symantec ghost solutions suite	eq	2.0.1
symantec:ghost_solutions_suite	symantec ghost solutions suite	eq	2.5