UltraISO Multiple Security Vulnerabilities

Bugtraq ID:	34325
Class:	Boundary Condition Error
CVE:	CVE-2008-4825 CVE-2008-3871
Remote:	Yes
Local:	No
Published:	Apr 01 2009 12:00AM
Updated:	Apr 01 2009 08:36PM
Credit:	Dyon Balding, Secunia Research
Vulnerable:	EZB Systems UltraISO 9.3.1.2633
Not Vulnerable:	EZB Systems UltraISO 9.3.3.2685

UltraISO Multiple Security Vulnerabilities

UltraISO is prone to multiple vulnerabilities.

Attackers may leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

UltraISO 9.3.1.2633 is affected; other versions may also be vulnerable.

UltraISO Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

UltraISO Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


EZB Systems UltraISO 9.3.1.2633

• EZB Systems UltraISO 9.3.3.2685
  http://www.ezbsystems.com/ultraiso/download.htm

UltraISO Multiple Security Vulnerabilities

References:

• Secunia Research: UltraISO Image Name Parsing Format String Vulnerabilities (Secunia)
  
• Secunia Research: UltraISO Image Parsing Buffer Overflow Vulnerabilities (Secunia)
  
• UltraISO Homepage (EZB Systems)
  
• UltraISO Revision History (EZB Systems)
  
• Secunia Research: UltraISO Image Name Parsing Format String Vulnerabilities (Secunia Research )
  
• Secunia Research: UltraISO Image Parsing Buffer Overflow Vulnerabilities (Secunia Research )