Format String Vulnerabilities in UltraISO by EZB Systems

CVE-2008-3871

What is CVE-2008-3871?

Multiple format string vulnerabilities exist in UltraISO that enable user-assisted attackers to execute arbitrary code through malformed format string specifiers included in the filename of DAA or ISZ files. This exploitation can occur when attackers craft specific filenames that target the vulnerability, allowing them to gain unauthorized control over the affected system. Users of UltraISO versions prior to 9.3.3.2685 are particularly at risk, as they may inadvertently invoke these vulnerabilities.

References