CVE-2018-18364

moderate-risk

Published 2019-02-08

Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application.

Do I need to act?

0.26% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.3/10 High

LOCAL / LOW complexity

Affected Products (20)

Ghost Solution Suite

Affected Vendors

Symantec

References (4)

Third Party Advisory http://www.securityfocus.com/bid/106684

Mitigation https://support.symantec.com/en_US/article.SYMSA1474.html

Third Party Advisory http://www.securityfocus.com/bid/106684

Mitigation https://support.symantec.com/en_US/article.SYMSA1474.html

/ 100

moderate-risk

Severity 23/34 · High

Exploitability 1/34 · Minimal

Exposure 21/34 · High