NVD

Id
51149  
Name
CVE-2009-3994  
Description
Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted DICOM file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-08  
Modified Date
2010-03-26  
Seq
2009-3994  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259305 51149 CVE-2009-3994 FEDORA-2009-13219  View
259306 51149 CVE-2009-3994 FEDORA-2009-13255  View
259307 51149 CVE-2009-3994 http://sourceforge.net/tracker/?func=detail&aid=2908728&group_id=4470&atid=304470  View
259308 51149 CVE-2009-3994 http://sourceforge.net/tracker/download.php?group_id=4470&atid=304470&file_id=353841&aid=2908728  View
259309 51149 CVE-2009-3994 20091204 Secunia Research: DevIL DICOM "GetUID()" Buffer Overflow Vulnerability  View
259310 51149 CVE-2009-3994 37207  View
259311 51149 CVE-2009-3994 devil-getuid-bo(54547)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42893 JVNDB-2009-003900 DevIL の GetUID 関数におけるスタックベースのバッファオーバーフローの脆弱性 DevIL の src-IL/src/il_dicom.c の GetUID 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-3994 41425 CVE-2009-3994 51149 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003900.html 2009-12-08 2012-06-26 View