CVE-2009-1260
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 43%
from disclosure to weapon388 days
Published on NVDApr 7
1st PoC+388d
metasploitApr 3
exploitation probability
43%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16666unverifiedcve_referencewww.exploit-db.com/exploits/8343unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.