CVE-2009-4230

Опубликовано: 08 дек. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to execute arbitrary code via vectors associated with crafted arguments to the (1) RGN::run, (2) JTLS::run, or (3) SHD::run function. NOTE: some of these details are obtained from third party information.

Ссылки

http://freshmeat.net/projects/iipimage/releases/309013
http://iipimage.sourceforge.net/blog/
Vendor Advisory
http://secunia.com/advisories/37565
Vendor Advisory
http://freshmeat.net/projects/iipimage/releases/309013
http://iipimage.sourceforge.net/blog/
Vendor Advisory
http://secunia.com/advisories/37565
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ruven_pillay:iipimage_server:*:*:*:*:*:*:*:*

Версия до 0.9.7 (включая)

cpe:2.3:a:ruven_pillay:iipimage_server:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:ruven_pillay:iipimage_server:0.9.4:*:*:*:*:*:*:*

cpe:2.3:a:ruven_pillay:iipimage_server:0.9.5:*:*:*:*:*:*:*

cpe:2.3:a:ruven_pillay:iipimage_server:0.9.6:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02695

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-h35f-vgh4-q65w

github

почти 4 года назад