Vulnerability record · CVE-2017-2823 · published 24 May 2017

CVE-2017-2823: Poweriso use after free vulnerability

Poweriso · Poweriso

A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability.

7.8 CVSS 3.1 High EPSS 9.4% · top 4.8% CWE-416 · Use after free

7.8CVSS 3.1 base score, v2 6.8

9.4%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Poweriso Poweriso

References

Link	Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0324	ExploitTechnical DescriptionThird Party AdvisoryVDB Entry
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0324	ExploitTechnical DescriptionThird Party AdvisoryVDB Entry

Track CVE-2017-2823 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-41992Poweriso out-of-bounds write vulnerabilityA memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted f…EPSS 0.47%16 Dec 2022 7.8CVE-2021-21871Poweriso out-of-bounds write vulnerabilityA memory corruption vulnerability exists in the DMG File Format Handler functionality of PowerISO 7.9. A specially crafted DMG file can lead to an ou…EPSS 0.95%29 Jun 2021 7.8CVE-2017-2817Poweriso memory buffer overflow vulnerabilityA stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can ca…EPSS 1.7%24 May 2017 7.8CVE-2006-2102Poweriso vulnerabilityDirectory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image.EPSS 3.7%29 Apr 2006 7.0CVE-2026-68820Windows Ancillary Function Driver for WinSock use-after-free privilege escalationThe Windows Ancillary Function Driver for WinSock (afd.sys) contains a use-after-free (CWE-416) that lets an authorized local attacker elevate privil…KEVEPSS 0.33%analysed11 Aug 2026 8.8CVE-2010-0806Microsoft Internet Explorer Peer Objects use-after-free allows remote code executionInternet Explorer 6, 6 SP1 and 7 contain a use-after-free in the Peer Objects component (iepeers.dll), where an object is accessed after deletion, le…KEVEPSS 82%analysed10 Mar 2010 8.8CVE-2010-0249Microsoft Internet Explorer use-after-free enables remote code executionInternet Explorer 6, 7 and 8 mishandle objects in memory, leaving a dangling pointer that can be reused after the object is freed. A remote attacker …KEVEPSS 92%analysed15 Jan 2010 7.8CVE-2020-9715Adobe Acrobat and Reader use-after-free allows code executionAdobe Acrobat and Reader contain a use-after-free (CWE-416) flaw affecting versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and ea…KEVEPSS 49%analysed19 Aug 2020

Source: NIST National Vulnerability Database (record CVE-2017-2823), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.