CVE-2009-4230: Ruven Pillay Iipimage Server

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to execute arbitrary code via vectors associated with crafted arguments to the (1) RGN::run, (2) JTLS::run, or (3) SHD::run function. NOTE: some of these details are obtained from third party information.

Affected products

• Ruven Pillay Iipimage Server: up to and including 0.9.7; version 0.9.3 only; version 0.9.4 only; version 0.9.5 only; version 0.9.6 only

Published 2009-12-08. Last modified 2026-06-16.