critical9.3Public exploit code
CVE-2009-1260
Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- UltraISO - '.CCD' File Parsing Buffer Overflow (Metasploit)2010-04-30 · local · windows · Verified
- UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow2009-04-03 · local · windows · Verified
Impact
Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ezbsystems | Ultraiso | through 9.3.3 Versions 3.1, 3.1_sr1, 3.1_sr2, 4.0, 4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/53275
- http://secunia.com/advisories/34581
- http://www.securityfocus.com/bid/34363
- http://www.vupen.com/english/advisories/2009/0935
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49672
- https://www.exploit-db.com/exploits/8343
- http://osvdb.org/53275
- http://secunia.com/advisories/34581
- http://www.securityfocus.com/bid/34363
- http://www.vupen.com/english/advisories/2009/0935
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49672
- https://www.exploit-db.com/exploits/8343