Microsoft has reported a vulnerability in Symantec Ghost Solution Suite, which can be exploited by malicious users to potentially compromise a vulnerable system.

The vulnerability is caused due to an unspecified error when parsing backup files and can be exploited to corrupt memory via a specially crafted GHO backup file placed in the appropriate path on the system.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions 2.5.1., build 11.5.1.2266 and prior.

Solution
Update to version 2.5.1 and apply patch GSS25x_b2620.
Further details available to Secunia VIM customers

Provided and/or discovered by
Jeremy Brown, Microsoft.

Changelog
Further details available to Secunia VIM customers

Original Advisory
SYM12-016:
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121010_00

MSVR:
http://technet.microsoft.com/en-us/security/msvr/msvr12-018

Deep Links
Links available to Secunia VIM customers