Ezbsystems

Ultraiso

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2026-12786

Exploit
  • EPSS 0.11%
  • Veröffentlicht 21.06.2026 07:15:07
  • Zuletzt bearbeitet 22.06.2026 18:24:24

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Loc...

5.5

CVE-2018-25267

Exploit
  • EPSS 0.18%
  • Veröffentlicht 22.04.2026 14:57:01
  • Zuletzt bearbeitet 29.04.2026 23:27:51

UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attackers can craft a malicious filename string with 304 by...

7.8

CVE-2017-2840

Exploit
  • EPSS 1.73%
  • Veröffentlicht 24.04.2018 19:29:02
  • Zuletzt bearbeitet 21.11.2024 03:24:15

A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to...

6.9

CVE-2010-5255

  • EPSS 0.4%
  • Veröffentlicht 07.09.2012 10:32:22
  • Zuletzt bearbeitet 16.06.2026 23:26:25

Untrusted search path vulnerability in UltraISO 9.3.6.2750 allows local users to gain privileges via a Trojan horse daemon.dll file in the current working directory, as demonstrated by a directory that contains a .iso file. NOTE: some of these detai...

9.3

CVE-2009-1260

  • EPSS 42.67%
  • Veröffentlicht 07.04.2009 23:30:00
  • Zuletzt bearbeitet 16.06.2026 23:06:53

Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.

9.3

CVE-2008-3871

  • EPSS 2.53%
  • Veröffentlicht 01.04.2009 18:00:00
  • Zuletzt bearbeitet 16.06.2026 22:56:42

Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via format string specifiers in the filename of a (1) DAA or (2) ISZ file.

9.3

CVE-2008-4825

  • EPSS 2.99%
  • Veröffentlicht 01.04.2009 18:00:00
  • Zuletzt bearbeitet 16.06.2026 22:58:37

Multiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via a crafted (1) CIF, (2) C2D, or (3) GI file.