CVE-2009-2295

Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large…

published July 5, 2009

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the (1) read_png_file or (2) read_png_file_as_rgb24 function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02612 · 85.3th percentile
Published
2009-07-05T16:00Z
EPSS history
Timeline
  • 05 JUL 16:00Z
    Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large…
    cvelistv5