Vulnerability Name:

CVE-2009-3296 (CCN-53883)

Assigned:2009-10-16
Published:2009-10-16
Updated:2009-10-21
Summary:Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-189
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2009-3296

Source: CCN
Type: CamlImages Web site
CamlImages

Source: SECUNIA
Type: Vendor Advisory
37067

Source: CONFIRM
Type: Patch
http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz

Source: CONFIRM
Type: Patch
http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz

Source: DEBIAN
Type: Patch
DSA-1912

Source: DEBIAN
Type: DSA-1912
camlimages -- integer overflow

Source: CCN
Type: GLSA-201006-02
CamlImages: User-assisted execution of arbitrary code

Source: CCN
Type: OSVDB ID: 59083
CamlImages tiffread.c TIFF File Handling Multiple Overflows

Source: BID
Type: Patch
36713

Source: CCN
Type: BID-36713
CamlImages JPEG Handling Remote Buffer Overflow Vulnerability

Source: XF
Type: UNKNOWN
camlimages-tiffread-bo(53883)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:gallium.inria:camimages:2.2:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:jun_furuse:camlimages:2.2:*:*:*:*:*:*:*
  • AND
  • cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:5.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:7956
    P
    		DSA-1912 camlimages -- integer overflow
    2014-06-23
    oval:org.mitre.oval:def:13502
    P
    		DSA-1912-2 advi -- integer overflow
    2014-06-23
    oval:org.mitre.oval:def:13745
    P
    		DSA-1912-1 camlimages -- integer overflow
    2014-06-23
    oval:org.debian:def:1912
    V
    		integer overflow
    2009-10-16
    BACK
    gallium.inria camimages 2.2
    jun_furuse camlimages 2.2
    gentoo linux *
    debian debian linux 4.0
    debian debian linux 5.0