← Vulnerability feed

Vulnerability record · CVE-2006-2102 · published 29 April 2006

CVE-2006-2102: Poweriso vulnerability

Poweriso · Poweriso

Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image.

7.8 CVSS 2.0 High EPSS 3.7% · top 10.6%
7.8CVSS 2.0 base score
3.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image.

AV:N/AC:L/Au:N/C:C/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/19858 ExploitVendor Advisory
http://securityreason.com/securityalert/815
http://securitytracker.com/id?1016008
http://secway.org/advisory/AD20060428.txt ExploitVendor Advisory
http://www.securityfocus.com/archive/1/432359/100/0/threaded
http://www.securityfocus.com/bid/17726
http://www.vupen.com/english/advisories/2006/1570
https://exchange.xforce.ibmcloud.com/vulnerabilities/26140
http://secunia.com/advisories/19858 ExploitVendor Advisory
http://securityreason.com/securityalert/815
http://securitytracker.com/id?1016008
http://secway.org/advisory/AD20060428.txt ExploitVendor Advisory
http://www.securityfocus.com/archive/1/432359/100/0/threaded
http://www.securityfocus.com/bid/17726
http://www.vupen.com/english/advisories/2006/1570
https://exchange.xforce.ibmcloud.com/vulnerabilities/26140

Track CVE-2006-2102 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-41992Poweriso out-of-bounds write vulnerabilityA memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted f…EPSS 0.47%7.8CVE-2021-21871Poweriso out-of-bounds write vulnerabilityA memory corruption vulnerability exists in the DMG File Format Handler functionality of PowerISO 7.9. A specially crafted DMG file can lead to an ou…EPSS 0.95%7.8CVE-2017-2817Poweriso memory buffer overflow vulnerabilityA stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can ca…EPSS 1.7%7.8CVE-2017-2823Poweriso use after free vulnerabilityA use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resu…EPSS 9.4%

Source: NIST National Vulnerability Database (record CVE-2006-2102), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.