CVE-2017-2840 Memory corruption in UltraISO

What is CVE-2017-2840?

CVE-2017-2840 is a high-severity memory corruption vulnerability in EZB Systems UltraISO, published on 24 Apr 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to trigger this vulnerability.

Weakness: CWE-120

Which versions are affected by CVE-2017-2840?

It affects 1 product.

Products include Ezbsystems Ultraiso.

How do I fix CVE-2017-2840?

No fix has been published for CVE-2017-2840 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2017-2840 being exploited?

There is no known exploitation of CVE-2017-2840 in the wild and no public exploit code.

Other vulnerabilities in EZB Systems UltraISO

• CVE-2009-1260 Memory corruption in n/a Critical 9.3
• CVE-2008-3871 Memory corruption in n/a Critical 9.3
• CVE-2008-4825 Memory corruption in n/a Critical 9.3
• CVE-2018-25267 UltraISO 9.7.1.3519 Buffer Overflow via Output FileName Medium 6.9
• CVE-2010-5255 Path traversal in n/a Medium 6.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wxpj-xvv4-jq8w.