CVE-2022-41992

PowerISO 8.3 is affected by CVE-2022-41992 due to a memory corruption in the VHD File Format CXSPARSE record parsing. The vulnerability arises because the Num of blocks value from the CXSPARSE record is not validated, allowing an attacker to control the loop counter and trigger an out-of-bounds w...

Vulnerability Spotlight: Memory corruption vulnerability discovered in PowerISO

Piotr Bania of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered a memory corruption vulnerability in PowerISO. TALOS-2022-1644 CVE-2022-41992 is a memory corruption vulnerability that exists in the VHD File Format parsing functionality of PowerISO 8.3. A specially crafte...

PowerISO 缓冲区错误漏洞

PowerISO is a powerful CD/DVD/BD image file manipulation tool from PowerISO that can open, extract, burn, create, edit, compress, encrypt, split and convert ISO files, and mount ISO files using internal virtual drives. A buffer error vulnerability exists in PowerISO version 8.3, which stems from...