KLA11360 ACE vulnerability in UltraISO

A buffer overflow vulnerability was found in UltraISO. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories UltraISO Revision History Related products UltraISO CVE list CVE-2017-2840 high Solution Update to the latest version Download UltraISO Impacts ACE...

CVE-2017-2840

Consolidated details show a buffer overflow in EZB Systems UltraISO 9.6.6.3300 during ISO parsing, triggered by a crafted ISO image. The exploit targets the NM (Alternate Name) entry: UltraISO reads NM_hdr.len from the ISO header, computes an oversized maxlen for strncpy, and then uses a large si...

CVE-2017-2840

A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to trigger this vulnerability...