CVE-2009-2660

EPSS 2.3%

camlimages - arbitrary code execution

Published: 8/4/2009Modified: 4/28/2026

Also known as:DEBIAN-CVE-2009-2660

Description

Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to (1) crafted GIF files (gifread.c) and (2) crafted JPEG files (jpegread.c), a different vulnerability than CVE-2009-2295.

Affected packages (4)

Debian/advifrom 0, < 1.6.0-15
Debian/camlimagesfrom 0, < 1:3.0.1-3
Debian/camlimagesfrom 0, < 2.20-8+etch2
Debian/camlimagesfrom 0, < 2.20-8+etch3

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-2660