Stack-Based Buffer Overflow Vulnerability in UltraISO by EZB Systems
CVE-2009-1260

Currently unrated

Key Information:

Vendor

Ezbsystems

Status
Vendor
CVE Published:
7 April 2009

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC๐ŸŸฃ EPSS 74%

What is CVE-2009-1260?

Multiple stack-based buffer overflow vulnerabilities exist in UltraISO versions 9.3.3.2685 and earlier, which can be exploited by remote attackers through specially crafted CCD or IMG files. Successful exploitation may lead to a denial of service or allow the execution of arbitrary code, posing significant security risks to systems utilizing this software. It is vital for users to ensure they are running updated versions to mitigate these risks.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

EPSS Score

74% chance of being exploited in the next 30 days.

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.