CVE-2009-3296 Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffe...
HighCVSS 7.5
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gallium.inria camimages | = 2.2 | No fix listed |
| debian/advi(Debian:12) | < 1.6.0-15 | 1.6.0-15 |
| debian/advi(Debian:13) | < 1.6.0-15 | 1.6.0-15 |
| debian/advi(Debian:14) | < 1.6.0-15 | 1.6.0-15 |
| debian/camlimages(Debian:12) | < 1:3.0.1-5 | 1:3.0.1-5 |
| debian/camlimages(Debian:13) | < 1:3.0.1-5 | 1:3.0.1-5 |
| debian/camlimages(Debian:14) | < 1:3.0.1-5 | 1:3.0.1-5 |
References
- 37067 third-party-advisory vendor-advisory
- security.debian.org patch
- security.debian.org patch
- DSA-1912 patch vendor-advisory
- 36713 patch vdb-entry
- Debian Security Tracker CVE-2009-3296 vendor-advisory
- bugs.debian.org issue-tracking