CVE-2017-2823
HighSummary
A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can lead to potential code execution.
Risk Assessment
An attacker can send a malicious .ISO file, which may result in unauthorized access to the system or execution of malicious code.
Recommendation
It is recommended to update PowerISO to the latest version to mitigate this vulnerability and to avoid opening .ISO files from untrusted sources.
Other vulnerabilities in PowerISO 6.8
See all- CVE-2017-2817High
A stack buffer overflow vulnerability exists in the ISO parsing functionality of PowerISO 6.8. A specially crafted ISO file can lead to potential code execution.
- CVE-2026-19189High
A security flaw has been discovered in PowerISO 9.3.0.0, affecting some unknown functionality in the scdemu.sys library of the Kernel Driver component. The manipulation results in improper privilege management. The attack requires local access, and the exploit has been released. The vendor did not respond.
Original NVD description (English source)
A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability.