Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-3994
HistoryDec 08, 2009 - 12:00 a.m.

CVE-2009-3994

2009-12-0800:00:00
ubuntu.com
ubuntu.com
5

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.041 Low

EPSS

Percentile

92.2%

Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c
in DevIL 1.7.8 allows remote attackers to cause a denial of service
(application crash) or execute arbitrary code via a crafted DICOM file.

Notes

Author Note
mdeslaur vulnerable code isn’t in 1.6.x

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.041 Low

EPSS

Percentile

92.2%