GCVE - cpe:2.3:a:entropymine:imageworsener:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:entropymine:imageworsener:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Entropymine (`1ec541f1-7253-52df-8a8e-8cced4194636`)
Product	Imageworsener (`cf44f925-a084-5d40-8c52-3ab940402ef1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/jsummers/imageworsener`	purl2cpe	2026-06-01 10:12:38.410793

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9094`	vulnerable	2026-06-08 05:10:09.326175	Details available The lzw_add_to_dict function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted image. Published: 2017-05-19T19:00:00.000Z Updated: 2024-08-05T16:55:22.166Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/98728 https://github.com/jsummers/imageworsener/issues/27	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9093`	vulnerable	2026-06-08 05:10:09.325876	Details available The my_skip_input_data_fn function in imagew-jpeg.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted image. Published: 2017-05-19T19:00:00.000Z Updated: 2024-09-16T20:12:40.605Z Open on db.gcve.eu Reference links https://github.com/jsummers/imageworsener/issues/26	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8327`	vulnerable	2026-06-08 05:10:08.061076	Details available The bmpr_read_uncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted image. Published: 2017-04-29T20:00:00.000Z Updated: 2024-08-05T16:34:22.592Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201706-06 https://github.com/jsummers/imageworsener/commit/86564051db45b466e5f667111ce00b5eeedc8fb6 https://blogs.gentoo.org/ago/2017/04/27/imageworsener-memory-allocation-failure-in-my_mallocfn-imagew-cmd-c/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8326`	vulnerable	2026-06-08 05:10:08.060711	Details available libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c. Published: 2017-04-29T20:00:00.000Z Updated: 2024-08-05T16:34:22.495Z Open on db.gcve.eu Reference links https://blogs.gentoo.org/ago/2017/04/27/imageworsener-two-left-shift/ https://security.gentoo.org/glsa/201706-06 https://github.com/jsummers/imageworsener/commit/a00183107d4b84bc8a714290e824ca9c68dac738	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8325`	vulnerable	2026-06-08 05:10:08.060237	Details available The iw_process_cols_to_intermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image. Published: 2017-04-29T20:00:00.000Z Updated: 2024-08-05T16:34:22.593Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201706-06 https://github.com/jsummers/imageworsener/commit/86564051db45b466e5f667111ce00b5eeedc8fb6 https://blogs.gentoo.org/ago/2017/04/27/imageworsener-heap-based-buffer-overflow-in-iw_process_cols_to_intermediate-imagew-main-c/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.