CVE-2009-1260

CVSS V2 High 9.3 CVSS V3 None
Description
Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.
Overview
  • CVE ID
  • CVE-2009-1260
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2009-04-07T23:30:00
  • Last Modified Date
  • 2017-09-29T01:34:16
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:ezbsystems:ultraiso:*:-:pe:*:*:*:*:* 1 OR 9.3.3
cpe:2.3:a:ezbsystems:ultraiso:3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:3.1_sr1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:3.1_sr2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:4.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:5.55:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:5.55_sr-1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:5.55_sr-2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.51:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.52:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.52_sr-1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.52_sr-2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.56_sr-1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:6.56_sr-2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.0:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.1:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.5:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.6:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.21_sr-1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.21_sr-2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.22_me:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.23:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.25:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.51:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.52:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.55:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.56:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.62:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.65:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.65_sr-2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:7.66:-:me:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.2:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.6:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.12:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.51:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.61:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.62:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.63:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.65:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:8.66:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:9.0:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:9.1.2:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:9.2:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:9.3:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:9.3.1:-:pe:*:*:*:*:* 1 OR
cpe:2.3:a:ezbsystems:ultraiso:9.3.2:-:pe:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9.3
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://osvdb.org/53275
http://www.vupen.com/english/advisories/2009/0935 Vendor Advisory
http://secunia.com/advisories/34581 Vendor Advisory
http://www.securityfocus.com/bid/34363
https://exchange.xforce.ibmcloud.com/vulnerabilities/49672
https://www.exploit-db.com/exploits/8343
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2009-1260
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1260
History
Created Old Value New Value Data Type Notes
2022-05-10 08:19:18 Added to TrackCVE