Total
5 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2017-2840 | 1 Ezbsystems | 1 Ultraiso | 2022-06-03 | 6.8 MEDIUM | 7.8 HIGH |
A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to trigger this vulnerability. | |||||
CVE-2008-4825 | 1 Ezbsystems | 1 Ultraiso | 2018-10-11 | 9.3 HIGH | N/A |
Multiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via a crafted (1) CIF, (2) C2D, or (3) GI file. | |||||
CVE-2008-3871 | 1 Ezbsystems | 1 Ultraiso | 2018-10-11 | 9.3 HIGH | N/A |
Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via format string specifiers in the filename of a (1) DAA or (2) ISZ file. | |||||
CVE-2009-1260 | 1 Ezbsystems | 1 Ultraiso | 2017-09-28 | 9.3 HIGH | N/A |
Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file. | |||||
CVE-2010-5255 | 1 Ezbsystems | 1 Ultraiso | 2012-09-20 | 6.9 MEDIUM | N/A |
Untrusted search path vulnerability in UltraISO 9.3.6.2750 allows local users to gain privileges via a Trojan horse daemon.dll file in the current working directory, as demonstrated by a directory that contains a .iso file. NOTE: some of these details are obtained from third party information. |