medium4.3Public exploit code
CVE-2009-1517
Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norto…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Norton Ghost Support module for EasySetup wizard - Remote Denial of Service (PoC)2009-04-23 · dos · windows · Verified
Impact
Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service (browser crash) and possibly execute arbitrary code via unspecified input to the (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, and (6) CallTour methods.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Norton Ghost | Version 14.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/34696
- http://www.securitytracker.com/id?1022120
- http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50098
- https://www.exploit-db.com/exploits/8523
- http://www.securityfocus.com/bid/34696
- http://www.securitytracker.com/id?1022120
- http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50098
- https://www.exploit-db.com/exploits/8523