poweriso CVE Vulnerabilities & CVE List (5)

Products (CPE): — CVEs: 5

poweriso vulnerability overview

Aggregates CVE and security vulnerability intelligence across all poweriso-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.

Historical issues mainly involve vendor risk memory corruption and vendor risk buffer overflow and related problems; some flaws may lead to vendor impact memory corruption and vendor impact application crash.

Vulnerability distribution trend (last 24 months)

Showing 15 of 5 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2022-41992 A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can lead to an out-of-bounds write. A victim needs to open a malicious file to trigger this vulnerability. [email protected] 7.8 0.47% 2022-12-16 2024-11-21
CVE-2021-21871 A memory corruption vulnerability exists in the DMG File Format Handler functionality of PowerISO 7.9. A specially crafted DMG file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. The vendor fixed it in a bug-release of the current version. [email protected] 7.8 0.95% 2021-06-29 2024-11-21
CVE-2017-2823 A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability. [email protected] 7.8 9.36% 2017-05-24 2026-05-13
CVE-2017-2817 A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific ISO file to trigger this vulnerability. [email protected] 8.8 1.66% 2017-05-24 2026-05-13
CVE-2006-2102 Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image. [email protected] 7.8 3.72% 2006-04-29 2026-04-16
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence