IIPImage Server Multiple Stack Buffer Overflow Vulnerabilities

Bugtraq ID:	41979
Class:	Boundary Condition Error
CVE:	CVE-2009-4230
Remote:	Yes
Local:	No
Published:	Dec 04 2009 12:00AM
Updated:	Dec 04 2009 12:00AM
Credit:	Willem Hengeveld
Vulnerable:
Not Vulnerable:

IIPImage Server Multiple Stack Buffer Overflow Vulnerabilities

IIPImage Server is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.

Attackers can leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

IIPImage Server versions prior to 0.9.8 are vulnerable.

IIPImage Server Multiple Stack Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IIPImage Server Multiple Stack Buffer Overflow Vulnerabilities

Solution:
These issues have been fixed in IIPImage Server 0.9.8. Please see the references for more information.

IIPImage Server Multiple Stack Buffer Overflow Vulnerabilities

References:

• IIPImage Home Page (IIPImage)
  
• IIPImage Server 0.9.8 (IIPImage)