CVE-2018-18364
Severity Score
7.3
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application.
Symantec Ghost Solution Suite (GSS), en versiones anteriores a la 3.3 RU1, podría ser susceptible a una vulnerabilidad de secuestro de DLL, que es un tipo de problema por el cual un atacante potencial intenta ejecutar código inesperado en una máquina. Esto ocurre colocando un archivo potencialmente foráneo (DLL) que el atacante intenta ejecutar mediante una aplicación conectada.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-10-15 CVE Reserved
- 2019-02-08 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-426: Untrusted Search Path
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/106684 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.symantec.com/en_US/article.SYMSA1474.html | 2019-02-13 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 2.0 Search vendor "Symantec" for product "Ghost Solution Suite" and version "2.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 2.5 Search vendor "Symantec" for product "Ghost Solution Suite" and version "2.5" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.0 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.0 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.0" | hf1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.0 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.0" | hf2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.0 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.0" | hf3 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.0 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.0" | hf4 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.0 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.0" | hf5 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.1 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.1 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.1" | mp1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.1 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.1" | mp2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.1 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.1" | mp3 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.1 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.1" | mp4 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.1 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.1" | mp5 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.1 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.1" | mp6 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.2 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.2" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.2 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.2" | ru1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.2 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.2" | ru2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.2 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.2" | ru3 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.2 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.2" | ru4 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.2 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.2" | ru5 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.2 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.2" | ru6 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.2 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.2" | ru7 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Ghost Solution Suite Search vendor "Symantec" for product "Ghost Solution Suite" | 3.3 Search vendor "Symantec" for product "Ghost Solution Suite" and version "3.3" | - |
Affected
| ||||||