HIGH
DevIL: Insufficient input sanitation by processing DICOM images
Published Dec 8, 2009
9.3
HIGHCVSS 2.0
EPSS 7.03%
Description
Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted DICOM file.
Affected products
No data.
- 1.7.8
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (14)
- http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033806.html vendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033809.html vendor-advisoryx_refsource_FEDORA
- http://secunia.com/advisories/37507 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/37955 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/secunia_research/2009-51/ x_refsource_MISCVendor Advisory
- http://sourceforge.net/tracker/?func=detail&aid=2908728&group_id=4470&atid=304470 x_refsource_CONFIRM
- http://sourceforge.net/tracker/download.php?group_id=4470&atid=304470&file_id=353841&aid=2908728 x_refsource_CONFIRMPatch
- http://www.securityfocus.com/archive/1/508217/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/37207 vdb-entryx_refsource_BID
- https://access.redhat.com/security/cve/CVE-2009-3994 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=542700 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54547 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2009-3994
- https://www.cve.org/CVERecord?id=CVE-2009-3994
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner flexera
Published Dec 8, 2009
Updated Aug 7, 2024
Reserved Nov 19, 2009
Link CVE-2009-3994
CISA Vulnrichment
Updated n/a