CVE-2018-18364
Estado: ModificadaAlta (7.3)—
Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Puntuación base: 7.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.87%
- Percentil entre todas las CVEs puntuadas: 58
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-426
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-18364",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.3,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.3
}
]
},
"affected": [
{
"source": "secure@symantec.com",
"affectedData": [
{
"vendor": "Symantec Corporation",
"product": "Ghost Solution Suite (GSS)",
"versions": [
{
"status": "affected",
"version": "Prior to 3.3 RU1"
}
]
}
]
}
],
"published": "2019-02-08T17:29:00.257",
"references": [
{
"url": "http://www.securityfocus.com/bid/106684",
"tags": [
"Third Party Advisory"
],
"source": "secure@symantec.com"
},
{
"url": "https://support.symantec.com/en_US/article.SYMSA1474.html",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"source": "secure@symantec.com"
},
{
"url": "http://www.securityfocus.com/bid/106684",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.symantec.com/en_US/article.SYMSA1474.html",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-426"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application."
},
{
"lang": "es",
"value": "Symantec Ghost Solution Suite (GSS), en versiones anteriores a la 3.3 RU1, podría ser susceptible a una vulnerabilidad de secuestro de DLL, que es un tipo de problema por el cual un atacante potencial intenta ejecutar código inesperado en una máquina. Esto ocurre colocando un archivo potencialmente foráneo (DLL) que el atacante intenta ejecutar mediante una aplicación conectada."
}
],
"lastModified": "2026-06-17T01:47:04.867",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2510DED-29C5-4728-8FC9-E0AEAA5BA26F"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C188EF7F-925B-4233-B85B-54AD0A0C677D"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4789E917-D99A-4B7E-A061-7A3090DC350C"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06742D1E-6944-4B9F-8BF8-8A41678E9803"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B384051A-6898-438A-99B6-9FC256A6B030"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E74E1685-A87A-4A11-B6C4-FAD54A43F104"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7C0B1C6-3C8A-4F7E-8AD3-5AFAA2677EB6"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5861E90B-0830-44DB-8A77-764C6712F8AC"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B97D085E-45E4-4FF5-88CF-E76667884419"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A89C8D4-0880-4875-A101-9AECBB4AACDE"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A89FBDA7-4B83-47A1-9302-BD50B04EE1E9"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B77ACB5-9FE8-489C-A0D6-DB28D0FC9ABC"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34341314-EED5-49CE-A400-403AF575ABBE"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E7E3290-9AE0-41A5-856E-F8A27E4B052E"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7690D5D-B1CA-4E0C-8BB6-EF39886CBFBF"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB3C24F1-A554-4217-BD29-A3A9763952D0"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3059E8B2-A30A-463D-94A4-40982DC47151"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47FEB9B9-A945-4F5C-A7CB-DB0B9CD77C2F"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "817D3F61-48A1-4A09-BE47-19797424D3D4"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D7440DF-A362-46FA-BDFD-B9E616211FE4"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "927FBB58-68D2-400E-8DE0-15C4C5717464"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "707F25BF-E3B9-4A46-AB96-BA3669C71248"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C45F0996-B9A9-4E85-85FA-1B88B39FFE01"
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00D250C6-C1A6-46C1-AAB5-7274F3D542B5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secure@symantec.com"
}