Sign inStart freeBook a demo

Norton Ghost vulnerabilitiesRanked by how likely they are to be used.

Product7 versions
The short answer

Norton Ghost is made by Symantec. We track 13 published vulnerabilities in it, across 7 versions. None of them is on the list of flaws known to be exploited today. If you run Norton Ghost, keep it on a version the vendor still supports.

See the riskiest flaws

We keep watching the known-exploited list.

Known exploited

Which Norton Ghost vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Norton Ghost's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Norton Ghost flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 6.6%
    CVE-2009-1517Medium

    Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of...

    CVSS4.3Published4 May 2009
  2. 3.0%
    CVE-2007-3666High

    Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function.

    CVSS7.5Published10 Jul 2007
  3. 2.2%
    CVE-2007-3132Medium

    Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service (client or server crash) via malformed...

    CVSS5.0Published8 Jun 2007
  4. 1.8%
    CVE-2001-0598Medium

    Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not...

    CVSS5.0Published2 Aug 2001
  5. 1.6%
    CVE-2002-0345High

    Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.

    CVSS7.5Published25 Jun 2002
  6. 1.5%
    CVE-2007-3665Medium

    Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions.

    CVSS5.0Published10 Jul 2007
  7. 0.6%
    CVE-2011-3477Medium

    GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a...

    CVSS5.5Published19 Feb 2018
  8. 0.4%
    CVE-2007-2359High

    Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long...

    CVSS7.2Published30 Apr 2007
  9. 0.4%
    CVE-2006-1286Low

    Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to read certain sensitive information...

    CVSS2.1Published19 Mar 2006
  10. 0.4%
    CVE-2006-1284Medium

    The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, includes a default administrator login account and password, which allows local users to gain...

    CVSS4.6Published19 Mar 2006
Precursor Intelligence

Running Norton Ghost? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 13 published vulnerabilities listed under the name Norton Ghost, across 7 versions.

None of Norton Ghost's vulnerabilities is on the list of flaws known to be exploited today.

Create a Precursor Intelligence account and track Norton Ghost. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring