NuytsTech Security

CVE-2008-3871

by ·

Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via format string specifiers in the filename of a (1) DAA or (2) ISZ file.

Date published : 2009-04-01

http://www.securityfocus.com/bid/34325

http://www.securityfocus.com/archive/1/502324/100/0/threaded

Tags: