PT-2009-1249 · Ez Systems · Ultraiso

Publicado 2009-04-01 · Atualizado 2018-10-11 · CVE-2008-4825

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UltraISO versions 9.3.1.2633 through 9.3.3.2685

Description The issue is related to multiple buffer overflows that can be triggered by crafted files, specifically CIF, C2D, or GI files, allowing attackers to execute arbitrary code. This can be achieved with user assistance.

Recommendations For versions 9.3.1.2633 through 9.3.3.2685, update to version 9.3.3.2685 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-4825

Produtos afetados

Ultraiso

Referências · 8

• http://secunia.com/advisories/32415 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-4825 · Nota de Segurança
• http://securityfocus.com/bid/34325 · Nota
• http://secunia.com/secunia_research/2008-49 · Nota
• http://ezbsystems.com/ultraiso/history.htm · Nota
• http://securitytracker.com/id?1021964 · Nota
• http://vupen.com/english/advisories/2009/0903 · Nota
• http://securityfocus.com/archive/1/502323/100/0/threaded · Nota