CVE-2009-1260

Related Files

UltraISO CCD File Parsing Buffer Overflow

Posted Mar 25, 2010

Authored by jduck | Site metasploit.com

This Metasploit module exploits a stack-based buffer overflow in EZB Systems, Inc's UltraISO. When processing .CCD files, data is read from file into a fixed-size stack buffer. Since no bounds checking is done, a buffer overflow can occur. Attackers can execute arbitrary code by convincing their victim to open an CCD file. NOTE: A file with the same base name, but the extension of "img" must also exist. Opening either file will trigger the vulnerability, but the files must both exist.

tags | exploit, overflow, arbitrary

advisories | CVE-2009-1260

SHA-256 | 30e02aa6984aacb11b71fa29122741f9292b8c26198078a7f112e2fb44fa522c

Download | Favorite | View