CVE-2009-1517

no score yetEPSS 6.6%

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service (browser crash) and possibly execute arbitrary code via unspecified input to the (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, and (6) CallTour methods.

EPSS: 6.6% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
Published: 2009-05-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

symantec:norton_ghost

References

http://www.securityfocus.com/bid/34696
http://www.securitytracker.com/id?1022120
http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/50098
https://www.exploit-db.com/exploits/8523

Check your stack JSON