CVE-2007-2888
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 55%
from disclosure to weapon0 days
Published on NVDMay 30
1st PoCMay 28
metasploitMay 24
exploitation probability
55%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-2007-2761. NOTE: some details are obtained from third party information.
Affected products
n/a · n/apublic PoCs found — 4
cve_referencewww.exploit-db.com/exploits/3978unverifiedexploitdbwww.exploit-db.com/exploits/16627unverifiedexploitdbwww.exploit-db.com/exploits/4001unverifiedexploitdbwww.exploit-db.com/exploits/4002unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.