4.3

CVE-2009-1517

Exploit

EPSS 6.72%
Veröffentlicht 04.05.2009 18:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service (browser crash) and possibly execute arbitrary code via unspecified input to the (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, and (6) CallTour methods.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Norton Ghost Version14.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.72%	0.904

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

http://www.securityfocus.com/bid/34696

Exploit

http://www.securitytracker.com/id?1022120

http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html

Exploit

URL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/50098

https://www.exploit-db.com/exploits/8523

https://nvd.nist.gov/vuln/detail/CVE-2009-1517

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1517

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1517

EUVD