EUVD-2008-3857

Malware in sbrugna...

CVE-2008-3871

Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via format string specifiers in the filename of a 1 DAA or 2 ISZ file...

CVE-2008-3871

UltraISO 9.3.1.2633 (and possibly earlier versions) contains format string vulnerabilities in DAA/ISZ file name handling that can allow user‑assisted arbitrary code execution. Vendor reportedly fixed the issue in version 9.3.3.2685; multiple advisories and CVE entries confirm the flaw. No exploit...