CVE-2009-2295

Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the (1) read_png_file or (2) read_png_file_as_rgb24 function.

Date published : 2009-07-05

http://www.securityfocus.com/bid/35556

http://www.securityfocus.com/archive/1/504696/100/0/threaded