PT-2009-1249 · Ez Systems · Ultraiso

Published 2009-04-01 · Updated 2018-10-11 · CVE-2008-4825

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UltraISO versions 9.3.1.2633 through 9.3.3.2685

Description The issue is related to multiple buffer overflows that can be triggered by crafted files, specifically CIF, C2D, or GI files, allowing attackers to execute arbitrary code. This can be achieved with user assistance.

Recommendations For versions 9.3.1.2633 through 9.3.3.2685, update to version 9.3.3.2685 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4825

Affected Products

Ultraiso

References · 8

• http://secunia.com/advisories/32415 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4825 · Security Note
• http://securityfocus.com/bid/34325 · Note
• http://secunia.com/secunia_research/2008-49 · Note
• http://ezbsystems.com/ultraiso/history.htm · Note
• http://securitytracker.com/id?1021964 · Note
• http://vupen.com/english/advisories/2009/0903 · Note
• http://securityfocus.com/archive/1/502323/100/0/threaded · Note