CVE-2006-2099

CVE-2006-2099 describes a directory traversal flaw in UltraISO 8.0.0.1392 that lets remote attackers cause arbitrary file writes by placing a .. in a filename inside an ISO image. Affected software is UltraISO; the underlying cause is unvalidated path traversal during ISO processing. The public r...