[SECURITY] [DSA 1912-1] New camlimages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1912-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 16, 2009 http://www.debian.org/security/faq -...

CVE-2009-2660

Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to 1 crafted GIF files gifread.c and 2 crafted JPEG files jpegread.c, a different...

CVE-2009-2295

Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the 1 readpngfile or 2 readpngfileasrgb24 function...