CamlImages JPEG Handling Remote Buffer Overflow Vulnerability

Bugtraq ID:	36713
Class:	Boundary Condition Error
CVE:	CVE-2009-3296
Remote:	Yes
Local:	No
Published:	Oct 16 2009 12:00AM
Updated:	Apr 16 2015 06:13PM
Credit:	Reported in a Debian advisory.
Vulnerable:	MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 CamlImages CamlImages 2.2
Not Vulnerable:

CamlImages JPEG Handling Remote Buffer Overflow Vulnerability

The CamlImages library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that relies on the affected library. Failed exploit attempts will result in a denial-of-service condition.

This issue affects CamlImages 2.2; other versions may be vulnerable as well.

CamlImages JPEG Handling Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

CamlImages JPEG Handling Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 arm

• Debian libcamlimages-ocaml_2.20-8+etch1_arm.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_arm.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_arm.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_arm.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_arm.deb

Debian Linux 5.0 ia-64

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_ia64.deb

Debian Linux 4.0 powerpc

• Debian libcamlimages-ocaml_2.20-8+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_powerpc.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_powerpc.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_powerpc.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva ocaml-camlimages-2.20-13.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva ocaml-camlimages-devel-2.20-13.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 alpha

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb

Debian Linux 5.0 ia-32

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_i386.deb

MandrakeSoft Enterprise Server 5

• Mandriva ocaml-camlimages-2.20-13.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva ocaml-camlimages-devel-2.20-13.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb

Debian Linux 5.0 mipsel

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_mipsel.deb

Debian Linux 4.0 amd64

• Debian libcamlimages-ocaml_2.20-8+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_amd64.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_amd64.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_amd64.deb

Debian Linux 4.0 ia-32

• Debian libcamlimages-ocaml_2.20-8+etch1_i386.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_i386.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_i386.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_i386.deb

Debian Linux 5.0 hppa

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_hppa.deb

Debian Linux 4.0 hppa

• Debian libcamlimages-ocaml_2.20-8+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_hppa.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_hppa.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_hppa.deb

Debian Linux 4.0 sparc

• Debian libcamlimages-ocaml_2.20-8+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_sparc.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_sparc.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_sparc.deb

Debian Linux 5.0 m68k

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb

Debian Linux 5.0 arm

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_arm.deb

Debian Linux 4.0 alpha

• Debian libcamlimages-ocaml_2.20-8+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_alpha.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_alpha.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_alpha.deb

Debian Linux 5.0 armel

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_armel.deb

Debian Linux 5.0

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb

Debian Linux 5.0 amd64

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_amd64.deb

Debian Linux 4.0 mipsel

• Debian libcamlimages-ocaml_2.20-8+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_mipsel.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_mipsel.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_mipsel.deb

Debian Linux 5.0 mips

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_mips.deb

Debian Linux 5.0 powerpc

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_powerpc.deb

Debian Linux 4.0 ia-64

• Debian libcamlimages-ocaml_2.20-8+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_ia64.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_ia64.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_ia64.deb

Debian Linux 4.0 mips

• Debian libcamlimages-ocaml_2.20-8+etch1_mips.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch1_mips.deb


• Debian libcamlimages-ocaml_2.20-8+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch2_mips.deb


• Debian libcamlimages-ocaml_2.20-8+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/camlimages/libcamlimage s-ocaml_2.20-8+etch3_mips.deb

Debian Linux 5.0 sparc

• Debian advi-examples_1.6.0-13+lenny2_all.deb
  http://security.debian.org/pool/updates/main/a/advi/advi-examples_1.6. 0-13+lenny2_all.deb


• Debian advi_1.6.0-13+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/a/advi/advi_1.6.0-13+lenn y2_sparc.deb

CamlImages JPEG Handling Remote Buffer Overflow Vulnerability

References:

• CamlImages Homepage (CamlImages)