{"id":"CVE-2009-3296","details":"Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows.","modified":"2026-04-10T03:40:54.647777Z","published":"2009-10-20T17:30:00Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/37067"},{"type":"FIX","url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz"},{"type":"FIX","url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz"},{"type":"FIX","url":"http://www.debian.org/security/2009/dsa-1912"},{"type":"FIX","url":"http://www.securityfocus.com/bid/36713"}],"schema_version":"1.7.5"}