Symantec Norton Ghost 'EasySetupInt.dll' ActiveX Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	34696
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 23 2009 12:00AM
Updated:	Apr 23 2009 08:26PM
Credit:	shinnai
Vulnerable:	Symantec Norton Ghost 14.0 Symantec Norton Ghost 13.0 Symantec Norton Ghost 12.0 Symantec Norton Ghost 10.1 Symantec Norton Ghost 10.0
Not Vulnerable:

Symantec Norton Ghost 'EasySetupInt.dll' ActiveX Multiple Remote Denial of Service Vulnerabilities

Symantec Norton Ghost EasySetup Wizard ActiveX control is prone to multiple denial-of-service vulnerabilities.

A successful attack allows an attacker to crash the application using the affected control (typically Internet Explorer), causing denial-of-service conditions. The attacker may also be able to run arbitrary code, but this has not been confirmed.

These issues are reported to affect 'EasySetupInt.dll' 14.0.4.30167; other versions may also be affected.

Symantec Norton Ghost 'EasySetupInt.dll' ActiveX Multiple Remote Denial of Service Vulnerabilities

The following example is available:

• /data/vulnerabilities/exploits/34696.txt

Symantec Norton Ghost 'EasySetupInt.dll' ActiveX Multiple Remote Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Norton Ghost 'EasySetupInt.dll' ActiveX Multiple Remote Denial of Service Vulnerabilities

References:

• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Symantec Ghost Solution Suite Homepage (Symantec)