[Forgot Password]
Login  Register Subscribe

23631

 
 

126951

 
 

99602

 
 

909

 
 

80198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-2895

Date: (C)2011-08-19   (M)2017-12-01 


The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

CVSS Score: 9.3Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECTRACK-1025920
SECUNIA-45544
SECUNIA-45568
SECUNIA-45599
SECUNIA-45986
SECUNIA-46127
SECUNIA-48951
BID-49124
APPLE-SA-2012-02-01-1
APPLE-SA-2012-05-09-1
APPLE-SA-2015-12-08-1
APPLE-SA-2015-12-08-2
APPLE-SA-2015-12-08-3
APPLE-SA-2015-12-08-4
DSA-2293
MDVSA-2011:153
NetBSD-SA2011-007
RHSA-2011:1154
RHSA-2011:1155
RHSA-2011:1161
RHSA-2011:1834
SUSE-SU-2011:1035
USN-1191-1
http://www.openwall.com/lists/oss-security/2011/08/10/10
http://lists.freedesktop.org/archives/xorg-announce/2011-August/001721.html
http://lists.freedesktop.org/archives/xorg-announce/2011-August/001722.html
http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d11ee5886e9d9ec610051a206b135a4cdc1e09a0
http://support.apple.com/kb/HT5130
http://support.apple.com/kb/HT5281
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/compress/zopen.c#rev1.17
https://bugzilla.redhat.com/show_bug.cgi?id=725760
https://bugzilla.redhat.com/show_bug.cgi?id=727624
https://support.apple.com/HT205635
https://support.apple.com/HT205637
https://support.apple.com/HT205640
https://support.apple.com/HT205641
openSUSE-SU-2011:1299
xorg-lzw-bo(69141)

CPE    40
cpe:/o:openbsd:openbsd:3.2
cpe:/o:openbsd:openbsd:3.1
cpe:/o:netbsd:netbsd
cpe:/o:openbsd:openbsd:3.4
...
CWE    1
CWE-119
OVAL    21
oval:org.secpod.oval:def:1000168
oval:org.secpod.oval:def:1000026
oval:org.secpod.oval:def:301087
oval:org.secpod.oval:def:400329
...

© 2013 SecPod Technologies