CVE-2009-2294

Published: Jul 5, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG image with crafted (1) width or (2) height values.

Affected (43)

Products: Dillo: Dillo

Dillo

1 product

Dillo

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Dillo Dillo	version ≤ 2.1
Dillo Dillo	Version 0.0.0
Dillo Dillo	Version 0.0.1
Dillo Dillo	Version 0.0.2
Dillo Dillo	Version 0.0.3
Dillo Dillo	Version 0.0.42
Dillo Dillo	Version 0.0.43
Dillo Dillo	Version 0.0.4
Dillo Dillo	Version 0.0.5
Dillo Dillo	Version 0.0.6
Dillo Dillo	Version 0.1.0
Dillo Dillo	Version 0.2.1
Dillo Dillo	Version 0.2.2
Dillo Dillo	Version 0.2.3
Dillo Dillo	Version 0.2.4
Dillo Dillo	Version 0.2
Dillo Dillo	Version 0.3.1
Dillo Dillo	Version 0.3.2
Dillo Dillo	Version 0.3
Dillo Dillo	Version 0.4
Dillo Dillo	Version 0.5.0
Dillo Dillo	Version 0.5.1
Dillo Dillo	Version 0.6.1
Dillo Dillo	Version 0.6.2
Dillo Dillo	Version 0.6.3
Dillo Dillo	Version 0.6.4
Dillo Dillo	Version 0.6.5
Dillo Dillo	Version 0.6.6
Dillo Dillo	Version 0.6
Dillo Dillo	Version 0.7.1.2
Dillo Dillo	Version 0.7.1
Dillo Dillo	Version 0.7.2
Dillo Dillo	Version 0.7.3
Dillo Dillo	Version 0.7
Dillo Dillo	Version 0.8.1
Dillo Dillo	Version 0.8.2
Dillo Dillo	Version 0.8.3
Dillo Dillo	Version 0.8.4
Dillo Dillo	Version 0.8.5 pre-dw-design1
Dillo Dillo	Version 0.8.5 pre-dw-design2
Dillo Dillo	Version 0.8.5 pre-dw-design3
Dillo Dillo	Version 0.8.6
Dillo Dillo	Version 0.8