Improper Sign-Extend Operations in Symantec Ghost Solutions Suite and Deployment Solution

CVE-2015-5689

Summary

The Ghost Explorer Utility within Symantec Ghost Solutions Suite and Deployment Solution is vulnerable due to improper sign-extend operations performed before accessing array elements. This flaw could be exploited by remote attackers to execute arbitrary code, leading to potential denial of service or the unauthorized disclosure of sensitive information via a specially crafted Ghost image.

References