CVE Vulnerabilities

CVE-2015-4523

Published: Sep 11, 2017 | Modified: Apr 20, 2025
CVSS 3.x
9.3
CRITICAL
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
9 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.

Affected Software

NameVendorStart VersionEnd Version
Malware_analysis_applianceSymantec*4.2 (including)
Malware_analyzer_g2Symantec*3.5 (including)

References