CVE-2017-2823

A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability.

Score

CVSS 3.0 8.8 High

Status

Modified - talos-cna@cisco.com

Published

2017-05-24

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Poweriso (Power Software)
• Poweriso (Poweriso)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0324