PT-2009-5056 · None · Camlimages

Tielei Wang · Published 2009-08-04 · Updated 2017-08-17 · CVE-2009-2660

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CamlImages version 2.2

Description The issue is related to multiple integer overflows that might allow attackers to execute arbitrary code. This can be triggered by images with large width and height values, leading to a heap-based buffer overflow. The vulnerability is associated with crafted GIF files in gifread.c and crafted JPEG files in jpegread.c.

Recommendations For CamlImages version 2.2, update to a version that fixes the integer overflows to prevent potential code execution. As a temporary workaround, consider restricting the processing of images with large width and height values to minimize the risk of exploitation. Avoid using the gifread.c and jpegread.c functions with untrusted image files until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-2660

DSA-1857-1

DSA-1912-1

DSA-1912-2

Affected Products

Camlimages

References · 19

• 🔥 https://bugs.gentoo.org/attachment.cgi?id=199108 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-2660 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-2660 · Vendor Advisory
• http://debian.org/security/2009/dsa-1857 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-2660 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2660 · Security Note
• http://debian.org/security/2009/dsa-1912 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52649 · Note
• http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz · Note
• ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.2.0-4+lenny2.diff.gz · Note
• http://openwall.com/lists/oss-security/2009/07/25/2 · Note
• http://camlcvs.inria.fr/cgi-bin/cvsweb.cgi/bazar-ocaml/camlimages/src/jpegread.c.diff?r1=1.3%3Br2=1.4%3Bsortby=date%3Bf=h · Note
• https://bugs.gentoo.org/show_bug.cgi?id=276235 · Note
• ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_3.0.1-3.diff.gz · Note
• http://secunia.com/advisories/37067 · Note