KLA11360 ACE vulnerability in UltraISO

A buffer overflow vulnerability was found in UltraISO. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories UltraISO Revision History Exploitation Public exploits exist for this vulnerability. Related products UltraISO CVE list CVE-2017-2840 critical...

CVE-2017-2840

A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to trigger this vulnerability...

CVE-2017-2840

Consolidated details show a buffer overflow in EZB Systems UltraISO 9.6.6.3300 during ISO parsing, triggered by a crafted ISO image. The exploit targets the NM (Alternate Name) entry: UltraISO reads NM_hdr.len from the ISO header, computes an oversized maxlen for strncpy, and then uses a large si...