CVE-2009-4230

Published Dec 8, 2009

Last updated 14 years ago

Overview

Description: Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to execute arbitrary code via vectors associated with crafted arguments to the (1) RGN::run, (2) JTLS::run, or (3) SHD::run function. NOTE: some of these details are obtained from third party information.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "47D307F5-C6BC-4D6D-8546-7B275520E634",
            "versionEndIncluding": "0.9.7"
          },
          {
            "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:0.9.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B8210940-1F95-4ABC-AF37-23BEADBB1A98"
          },
          {
            "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:0.9.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5153FFE6-3D23-44BB-8A56-0E30234DA905"
          },
          {
            "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:0.9.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0EEA88E2-B935-4AED-8B46-27E24BBD2D4E"
          },
          {
            "criteria": "cpe:2.3:a:ruven_pillay:iipimage_server:0.9.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C7718644-6DF4-455C-996A-D5B7CC96BC2A"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References