CVE-2007-2888 Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-...
HighCVSS 7.6
EPSS 54.7%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-2007-2761. NOTE: some details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ezb systems ultraiso | <= 8.6.2.2011 | No fix listed |
References
- 36570 vdb-entry
- 25384 exploit third-party-advisory vendor-advisory
- 24140 exploit vdb-entry
- ultraiso-cuefile-bo(34485) vdb-entry
- 3978 exploit