Security Advisory

CVE-2008-3871

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-04-01 17:00:00
Last updated 2024-08-07 09:53:00
Assigner flexera
CVSS score not scored
State PUBLISHED

Description

Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via format string specifiers in the filename of a (1) DAA or (2) ISZ file.