CVE Daily

CVE-2009-3296

Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote at...

High CVSS 7.5

Overview

Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows.

CWE: CWE-189 Published: 2009-10-20T17:30:00.953
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags