CVE-2009-1257 - Vulnerability Details - OpenCVE

Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Magic Iso Maker	Magic Iso Maker

Configuration 1 [-]

cpe:2.3:a:magic_iso_maker:magic_iso_maker:5.5:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/53262
http://secunia.com/advisories/34595
http://www.securityfocus.com/bid/34574
http://www.vupen.com/english/advisories/2009/0940
https://exchange.xforce.ibmcloud.com/vulnerabilities/49673
https://www.exploit-db.com/exploits/8343

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-04-07T23:00:00

Updated: 2024-08-07T05:04:49.296Z

Reserved: 2009-04-07T00:00:00

Link: CVE-2009-1257

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-04-07T23:30:00.267

Modified: 2025-04-09T00:30:58.490

Link: CVE-2009-1257

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-04-03T00:00:00", "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "34595", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34595"}, {"name": "magiciso-ccd-bo(49673)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49673"}, {"name": "53262", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/53262"}, {"name": "ADV-2009-0940", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0940"}, {"name": "8343", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/8343"}, {"name": "34574", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34574"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2009-1257", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "34595", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34595"}, {"name": "magiciso-ccd-bo(49673)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49673"}, {"name": "53262", "refsource": "OSVDB", "url": "http://osvdb.org/53262"}, {"name": "ADV-2009-0940", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0940"}, {"name": "8343", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/8343"}, {"name": "34574", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34574"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T05:04:49.296Z"}, "title": "CVE Program Container", "references": [{"name": "34595", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/34595"}, {"name": "magiciso-ccd-bo(49673)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49673"}, {"name": "53262", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/53262"}, {"name": "ADV-2009-0940", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/0940"}, {"name": "8343", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/8343"}, {"name": "34574", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34574"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-1257", "datePublished": "2009-04-07T23:00:00", "dateReserved": "2009-04-07T00:00:00", "dateUpdated": "2024-08-07T05:04:49.296Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:magic_iso_maker:magic_iso_maker:5.5:*:*:*:*:*:*:*", "matchCriteriaId": "28A7DD9C-D097-4E16-B97A-E744C11C217E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en mont\u00edculo en Magic ISO Maker v5.5 build 0274, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) o ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un fichero CCD manipulado."}], "id": "CVE-2009-1257", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 8.5, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-04-07T23:30:00.267", "references": [{"source": "[email protected]", "url": "http://osvdb.org/53262"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/34595"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/34574"}, {"source": "[email protected]", "url": "http://www.vupen.com/english/advisories/2009/0940"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49673"}, {"source": "[email protected]", "url": "https://www.exploit-db.com/exploits/8343"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/53262"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/34595"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/34574"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2009/0940"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49673"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/8343"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "[email protected]", "type": "Primary"}]}