Search

Find a vulnerability

Search criteria

    3 vulnerabilities by Ezbsystems

    CVE-2026-12786 (GCVE-0-2026-12786)

    Vulnerability from cvelistv5 – Published: 2026-06-21 07:15 – Updated: 2026-06-22 13:37
    VLAI
    Title
    Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control
    Summary
    A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-06-22 13:36 UTC
    CWE
    • CWE-284 - Improper Access Controls
    • CWE-266 - Incorrect Privilege Assignment
    Assigner
    VulDB CNA
    References
    Impacted products
    Vendor Product Version
    Ezbsystems UltraISO Premium Edition Affected: 9.0
    Affected: 9.1
    Affected: 9.2
    Affected: 9.3
    Affected: 9.4
    Affected: 9.5
    Affected: 9.6
    Affected: 9.7
    Affected: 9.8
    Affected: 9.9
    Affected: 9.10
    Affected: 9.11
    Affected: 9.12
    Affected: 9.13
    Affected: 9.14
    Affected: 9.15
    Affected: 9.16
    Affected: 9.17
    Affected: 9.18
    Affected: 9.19
    Affected: 9.20
    Affected: 9.21
    Affected: 9.22
    Affected: 9.23
    Affected: 9.24
    Affected: 9.25
    Affected: 9.26
    Affected: 9.27
    Affected: 9.28
    Affected: 9.29
    Affected: 9.30
    Affected: 9.31
    Affected: 9.32
    Affected: 9.33
    Affected: 9.34
    Affected: 9.35
    Affected: 9.36
    Affected: 9.37
    Affected: 9.38
    Affected: 9.39
    Affected: 9.40
    Affected: 9.41
    Affected: 9.42
    Affected: 9.43
    Affected: 9.44
    Affected: 9.45
    Affected: 9.46
    Affected: 9.47
    Affected: 9.48
    Affected: 9.49
    Affected: 9.50
    Affected: 9.51
    Affected: 9.52
    Affected: 9.53
    Affected: 9.54
    Affected: 9.55
    Affected: 9.56
    Affected: 9.57
    Affected: 9.58
    Affected: 9.59
    Affected: 9.60
    Affected: 9.61
    Affected: 9.62
    Affected: 9.63
    Affected: 9.64
    Affected: 9.65
    Affected: 9.66
    Affected: 9.67
    Affected: 9.68
    Affected: 9.69
    Affected: 9.70
    Affected: 9.71
    Affected: 9.72
    Affected: 9.73
    Affected: 9.74
    Affected: 9.75
    Affected: 9.76
        cpe:2.3:a:ezbsystems:ultraiso_premium_edition:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-12786",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-06-22T13:36:48.924481Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-22T13:37:02.522Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:ezbsystems:ultraiso_premium_edition:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Kernel Driver"
              ],
              "product": "UltraISO Premium Edition",
              "vendor": "Ezbsystems",
              "versions": [
                {
                  "status": "affected",
                  "version": "9.0"
                },
                {
                  "status": "affected",
                  "version": "9.1"
                },
                {
                  "status": "affected",
                  "version": "9.2"
                },
                {
                  "status": "affected",
                  "version": "9.3"
                },
                {
                  "status": "affected",
                  "version": "9.4"
                },
                {
                  "status": "affected",
                  "version": "9.5"
                },
                {
                  "status": "affected",
                  "version": "9.6"
                },
                {
                  "status": "affected",
                  "version": "9.7"
                },
                {
                  "status": "affected",
                  "version": "9.8"
                },
                {
                  "status": "affected",
                  "version": "9.9"
                },
                {
                  "status": "affected",
                  "version": "9.10"
                },
                {
                  "status": "affected",
                  "version": "9.11"
                },
                {
                  "status": "affected",
                  "version": "9.12"
                },
                {
                  "status": "affected",
                  "version": "9.13"
                },
                {
                  "status": "affected",
                  "version": "9.14"
                },
                {
                  "status": "affected",
                  "version": "9.15"
                },
                {
                  "status": "affected",
                  "version": "9.16"
                },
                {
                  "status": "affected",
                  "version": "9.17"
                },
                {
                  "status": "affected",
                  "version": "9.18"
                },
                {
                  "status": "affected",
                  "version": "9.19"
                },
                {
                  "status": "affected",
                  "version": "9.20"
                },
                {
                  "status": "affected",
                  "version": "9.21"
                },
                {
                  "status": "affected",
                  "version": "9.22"
                },
                {
                  "status": "affected",
                  "version": "9.23"
                },
                {
                  "status": "affected",
                  "version": "9.24"
                },
                {
                  "status": "affected",
                  "version": "9.25"
                },
                {
                  "status": "affected",
                  "version": "9.26"
                },
                {
                  "status": "affected",
                  "version": "9.27"
                },
                {
                  "status": "affected",
                  "version": "9.28"
                },
                {
                  "status": "affected",
                  "version": "9.29"
                },
                {
                  "status": "affected",
                  "version": "9.30"
                },
                {
                  "status": "affected",
                  "version": "9.31"
                },
                {
                  "status": "affected",
                  "version": "9.32"
                },
                {
                  "status": "affected",
                  "version": "9.33"
                },
                {
                  "status": "affected",
                  "version": "9.34"
                },
                {
                  "status": "affected",
                  "version": "9.35"
                },
                {
                  "status": "affected",
                  "version": "9.36"
                },
                {
                  "status": "affected",
                  "version": "9.37"
                },
                {
                  "status": "affected",
                  "version": "9.38"
                },
                {
                  "status": "affected",
                  "version": "9.39"
                },
                {
                  "status": "affected",
                  "version": "9.40"
                },
                {
                  "status": "affected",
                  "version": "9.41"
                },
                {
                  "status": "affected",
                  "version": "9.42"
                },
                {
                  "status": "affected",
                  "version": "9.43"
                },
                {
                  "status": "affected",
                  "version": "9.44"
                },
                {
                  "status": "affected",
                  "version": "9.45"
                },
                {
                  "status": "affected",
                  "version": "9.46"
                },
                {
                  "status": "affected",
                  "version": "9.47"
                },
                {
                  "status": "affected",
                  "version": "9.48"
                },
                {
                  "status": "affected",
                  "version": "9.49"
                },
                {
                  "status": "affected",
                  "version": "9.50"
                },
                {
                  "status": "affected",
                  "version": "9.51"
                },
                {
                  "status": "affected",
                  "version": "9.52"
                },
                {
                  "status": "affected",
                  "version": "9.53"
                },
                {
                  "status": "affected",
                  "version": "9.54"
                },
                {
                  "status": "affected",
                  "version": "9.55"
                },
                {
                  "status": "affected",
                  "version": "9.56"
                },
                {
                  "status": "affected",
                  "version": "9.57"
                },
                {
                  "status": "affected",
                  "version": "9.58"
                },
                {
                  "status": "affected",
                  "version": "9.59"
                },
                {
                  "status": "affected",
                  "version": "9.60"
                },
                {
                  "status": "affected",
                  "version": "9.61"
                },
                {
                  "status": "affected",
                  "version": "9.62"
                },
                {
                  "status": "affected",
                  "version": "9.63"
                },
                {
                  "status": "affected",
                  "version": "9.64"
                },
                {
                  "status": "affected",
                  "version": "9.65"
                },
                {
                  "status": "affected",
                  "version": "9.66"
                },
                {
                  "status": "affected",
                  "version": "9.67"
                },
                {
                  "status": "affected",
                  "version": "9.68"
                },
                {
                  "status": "affected",
                  "version": "9.69"
                },
                {
                  "status": "affected",
                  "version": "9.70"
                },
                {
                  "status": "affected",
                  "version": "9.71"
                },
                {
                  "status": "affected",
                  "version": "9.72"
                },
                {
                  "status": "affected",
                  "version": "9.73"
                },
                {
                  "status": "affected",
                  "version": "9.74"
                },
                {
                  "status": "affected",
                  "version": "9.75"
                },
                {
                  "status": "affected",
                  "version": "9.76"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "winslow1984 (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 8.5,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-284",
                  "description": "Improper Access Controls",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-266",
                  "description": "Incorrect Privilege Assignment",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-21T07:15:07.752Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-372528 | Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control",
              "tags": [
                "vdb-entry"
              ],
              "url": "https://vuldb.com/vuln/372528"
            },
            {
              "name": "VDB-372528 | CTI Indicators (IOB, IOC, TTP, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/372528/cti"
            },
            {
              "name": "CVE-2026-12786 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-12786"
            },
            {
              "name": "Submit #835614 | UltraISO Premium Edition Kernel Driver bootpt64.sys 9.76 Local Privilege Escapation",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/835614"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://winslow1984.com/books/cve-collection/page/ultraiso-premium-976-kernel-driver-bootpt64sys-local-privilege-escalation"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-06-20T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-06-20T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-06-20T11:59:15.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-12786",
        "datePublished": "2026-06-21T07:15:07.752Z",
        "dateReserved": "2026-06-20T09:54:11.353Z",
        "dateUpdated": "2026-06-22T13:37:02.522Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2018-25290 (GCVE-0-2018-25290)

    Vulnerability from cvelistv5 – Published: 2026-04-26 13:19 – Updated: 2026-04-27 16:43
    VLAI
    Title
    Easyboot 6.6.0 Buffer Overflow Denial of Service
    Summary
    Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by accessing File > Tools > Replace Text and pasting a 7000-byte payload into the text fields to cause a denial of service.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-27 16:43 UTC
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    VulnCheck CNA
    Impacted products
    Vendor Product Version
    Ezbsystems Easyboot Affected: 6.6.0
    Create a notification for this product.
    Date Public
    2018-08-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2018-25290",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-27T16:43:21.214286Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-27T16:43:57.958Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Easyboot",
              "vendor": "Ezbsystems",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.6.0"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Gionathan \"John\" Reale"
            }
          ],
          "datePublic": "2018-08-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by accessing File \u003e Tools \u003e Replace Text and pasting a 7000-byte payload into the text fields to cause a denial of service."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS"
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.2,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-120",
                  "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-26T13:19:20.014Z",
            "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
            "shortName": "VulnCheck"
          },
          "references": [
            {
              "name": "ExploitDB-45241",
              "tags": [
                "exploit"
              ],
              "url": "https://www.exploit-db.com/exploits/45241"
            },
            {
              "name": "Official Product Homepage",
              "tags": [
                "product"
              ],
              "url": "http://www.ezbsystems.com/"
            },
            {
              "name": "VulnCheck Advisory: Easyboot 6.6.0 Buffer Overflow Denial of Service",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://www.vulncheck.com/advisories/easyboot-buffer-overflow-denial-of-service"
            }
          ],
          "title": "Easyboot 6.6.0 Buffer Overflow Denial of Service",
          "x_generator": {
            "engine": "vulncheck"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "assignerShortName": "VulnCheck",
        "cveId": "CVE-2018-25290",
        "datePublished": "2026-04-26T13:19:20.014Z",
        "dateReserved": "2026-04-26T13:09:44.509Z",
        "dateUpdated": "2026-04-27T16:43:57.958Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2018-25289 (GCVE-0-2018-25289)

    Vulnerability from cvelistv5 – Published: 2026-04-26 13:19 – Updated: 2026-04-27 20:09
    VLAI
    Title
    Softdisk 3.0.3 Buffer Overflow Denial of Service
    Summary
    Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu's Enter Registration Code dialog to cause a denial of service.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-27 20:09 UTC
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    VulnCheck CNA
    Impacted products
    Vendor Product Version
    Ezbsystems Softdisk Affected: 3.0.3
    Create a notification for this product.
    Date Public
    2018-08-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2018-25289",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-27T20:09:10.454886Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-27T20:09:21.632Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Softdisk",
              "vendor": "Ezbsystems",
              "versions": [
                {
                  "status": "affected",
                  "version": "3.0.3"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Gionathan \"John\" Reale"
            }
          ],
          "datePublic": "2018-08-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu\u0027s Enter Registration Code dialog to cause a denial of service."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS"
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.2,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-120",
                  "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-26T13:19:19.345Z",
            "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
            "shortName": "VulnCheck"
          },
          "references": [
            {
              "name": "ExploitDB-45245",
              "tags": [
                "exploit"
              ],
              "url": "https://www.exploit-db.com/exploits/45245"
            },
            {
              "name": "Official Product Homepage",
              "tags": [
                "product"
              ],
              "url": "http://www.ezbsystems.com/"
            },
            {
              "name": "Product Reference",
              "tags": [
                "product"
              ],
              "url": "https://www.ezbsystems.com/softdisc/download.htm"
            },
            {
              "name": "VulnCheck Advisory: Softdisk 3.0.3 Buffer Overflow Denial of Service",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://www.vulncheck.com/advisories/softdisk-buffer-overflow-denial-of-service"
            }
          ],
          "title": "Softdisk 3.0.3 Buffer Overflow Denial of Service",
          "x_generator": {
            "engine": "vulncheck"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "assignerShortName": "VulnCheck",
        "cveId": "CVE-2018-25289",
        "datePublished": "2026-04-26T13:19:19.345Z",
        "dateReserved": "2026-04-26T13:09:37.441Z",
        "dateUpdated": "2026-04-27T20:09:21.632Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }