CVE-2021-46389

Name of the Vulnerable Software and Affected Versions IIPImage High Resolution Streaming Image Server versions prior to commit 882925b295a80ec992063deffc2a3b0d803c3195

Description The issue is caused by an integer overflow in iipsrv.fcgi through malformed HTTP query parameters. This can be exploited by sending specifically crafted requests to the server.

Recommendations For versions prior to commit 882925b295a80ec992063deffc2a3b0d803c3195, update to a version that includes the fix for the integer overflow in iipsrv.fcgi. As a temporary workaround, consider restricting access to the iipsrv.fcgi module to minimize the risk of exploitation.