CVE Vulnerabilities

CVE-2015-4523

Published: Sep 11, 2017 | Modified: Oct 03, 2018
CVSS 3.x
9.3
CRITICAL
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
9 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:C
RedHat/V2
RedHat/V3
Ubuntu

Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.

Affected Software

Name Vendor Start Version End Version
Malware_analysis_appliance Symantec * 4.2 (including)
Malware_analyzer_g2 Symantec * 3.5 (including)

References