GCVE - cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*

part: a version: 1.3.1 update: *

Vendor	Entropymine (`1ec541f1-7253-52df-8a8e-8cced4194636`)
Product	Imageworsener (`cf44f925-a084-5d40-8c52-3ab940402ef1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/jsummers/imageworsener`	purl2cpe	2026-06-01 10:12:38.410815

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9207`	vulnerable	2026-06-08 05:10:09.450001	Details available The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image, related to imagew-jpeg.c. Published: 2017-05-23T03:56:00.000Z Updated: 2024-09-16T19:56:15.688Z Open on db.gcve.eu Reference links https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9206`	vulnerable	2026-06-08 05:10:09.449710	Details available The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image, related to imagew-jpeg.c. Published: 2017-05-23T03:56:00.000Z Updated: 2024-09-17T02:57:30.668Z Open on db.gcve.eu Reference links https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9205`	vulnerable	2026-06-08 05:10:09.449414	Details available The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c. Published: 2017-05-23T03:56:00.000Z Updated: 2024-09-16T23:25:51.163Z Open on db.gcve.eu Reference links https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9204`	vulnerable	2026-06-08 05:10:09.448969	Details available The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c. Published: 2017-05-23T03:56:00.000Z Updated: 2024-09-17T03:49:05.723Z Open on db.gcve.eu Reference links https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9203`	vulnerable	2026-06-08 05:10:09.448637	Details available imagew-main.c:960:12 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (buffer underflow) via a crafted image, related to imagew-bmp.c. Published: 2017-05-23T03:56:00.000Z Updated: 2024-09-17T03:19:05.468Z Open on db.gcve.eu Reference links https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/ https://github.com/jsummers/imageworsener/commit/a4f247707f08e322f0b41e82c3e06e224240a654	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9202`	vulnerable	2026-06-08 05:10:09.448278	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9201`	vulnerable	2026-06-08 05:10:09.447699	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.