Security Advisory

CVE-2009-1517

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-05-04 18:00:00
Last updated 2024-08-07 05:13:25
Assigner mitre
State PUBLISHED

Description

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service (browser crash) and possibly execute arbitrary code via unspecified input to the (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, and (6) CallTour methods.