Debian has issued an update for camlimages. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.

The vulnerabilities are caused due to integer overflows within the "read_png_file()" and "read_png_file_as_rgb24()" functions, which can be exploited to cause a heap-based buffer overflow when processing specially crafted PNG images.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Provided and/or discovered by
Tielei Wang, ICST-ERCIS.

Original Advisory
DSA-1832-1:
http://lists.debian.org/debian-security-announce/2009/msg00145.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers