CVE		CVE-2009-3296
Status		UNKNOWN
Description		Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows.
Severity		High
CVSS score		7,5
CVSS vector		(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Phase		ASSIGNED (21.10.2009)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3296
References		BID : 36713
		CONFIRM : http://security.debian.org/pool/updates/main/c/cam...
		CONFIRM : http://security.debian.org/pool/updates/main/c/cam...
		DEBIAN : DSA-1912
		SECUNIA : 37067
SecurityVulns:		CamlImages library integer overflows