CVE-2022-41992

PowerISO 8.3 is affected by CVE-2022-41992 due to a memory corruption in the VHD File Format CXSPARSE record parsing. The vulnerability arises because the Num of blocks value from the CXSPARSE record is not validated, allowing an attacker to control the loop counter and trigger an out-of-bounds w...

CVE-2022-41992: Out-of-bounds Write

A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can lead to an out-of-bounds write. A victim needs to open a malicious file to trigger this vulnerability...

PT-2022-26201

Name of the Vulnerable Software and Affected Versions PowerISO version 8.3 Description A memory corruption issue exists in the VHD File Format parsing CXSPARSE record functionality. This can be triggered by a specially-crafted file, leading to an out-of-bounds write. A victim needs to open a...

Vulnerability Spotlight: Memory corruption vulnerability discovered in PowerISO

Piotr Bania of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered a memory corruption vulnerability in PowerISO. TALOS-2022-1644 CVE-2022-41992 is a memory corruption vulnerability that exists in the VHD File Format parsing functionality of PowerISO 8.3. A specially crafte...

PowerISO 缓冲区错误漏洞

PowerISO is a powerful CD/DVD/BD image file manipulation tool from PowerISO that can open, extract, burn, create, edit, compress, encrypt, split and convert ISO files, and mount ISO files using internal virtual drives. A buffer error vulnerability exists in PowerISO version 8.3, which stems from...