UltraISO.CCD.Buffer.Overflow

Release Date Jun 17, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer-overflow vulnerability in UltraISO. The vulnerability is caused by an error when the vulnerable software handles a malicious .ccd or .img file. It allows a remote attacker to execute arbitrary code via sending a crafted .ccd or .img file.
Affected Products UltraISO 9.3.3.2685 and earlier
Recommended Actions Do not open untrusted image files.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-1260
Reference/s http://www.securityfocus.com/bid/34363 (BugTraq)

Fortinet