QwikSec

Security Database

CVE

CWE

Training

CVE-2009-2660

Published: Aug 4, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to (1) crafted GIF files (gifread.c) and (2) crafted JPEG files (jpegread.c), a different vulnerability than CVE-2009-2295.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

[oss-security] 20090725 camlimages: Integer overflows in GIF and JPEG readers

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_DEBIAN

third-party-advisory

x_refsource_SECUNIA

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540146

x_refsource_CONFIRM

http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz

x_refsource_CONFIRM

http://camlcvs.inria.fr/cgi-bin/cvsweb.cgi/bazar-ocaml/camlimages/src/jpegread.c.diff?r1=1.3%3Br2=1.4%3Bsortby=date%3Bf=h

x_refsource_CONFIRM

https://bugs.gentoo.org/attachment.cgi?id=199108

x_refsource_CONFIRM

https://bugs.gentoo.org/show_bug.cgi?id=276235

x_refsource_CONFIRM

camlimages-gifread-jpegread-bo(52649)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.