| Package | Affected versions | Patched versions |
|---|---|---|
| ultraiso | = 9.3.1.2633 |
Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via format string specifiers in the filename of a (1) DAA or (2) ISZ file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free