[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

112965

 
 

909

 
 

87888

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2011-2896Date: (C)2011-08-19   (M)2018-07-23


The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.1
Exploit Score: 4.9
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECTRACK-1025929
SECUNIA-45621
SECUNIA-45900
SECUNIA-45945
SECUNIA-45948
SECUNIA-46024
SECUNIA-48236
SECUNIA-48308
BID-49148
SECUNIA-50737
DSA-2354
DSA-2426
FEDORA-2011-11173
FEDORA-2011-11197
FEDORA-2011-11221
FEDORA-2011-11229
FEDORA-2011-11305
FEDORA-2011-11318
GLSA-201209-23
MDVSA-2011:146
MDVSA-2011:167
RHSA-2011:1635
RHSA-2012:1180
RHSA-2012:1181
USN-1207-1
USN-1214-1
http://www.openwall.com/lists/oss-security/2011/08/10/10
http://cups.org/str.php?L3867
http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc
http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4
https://bugzilla.redhat.com/show_bug.cgi?id=727800
https://bugzilla.redhat.com/show_bug.cgi?id=730338

CPE    116
cpe:/a:swi-prolog:swi-prolog:5.6.61
cpe:/a:swi-prolog:swi-prolog:5.6.62
cpe:/a:swi-prolog:swi-prolog:5.6.63
cpe:/a:swi-prolog:swi-prolog:5.6.64
...
CWE    1
CWE-119
OVAL    19
oval:org.secpod.oval:def:301066
oval:org.secpod.oval:def:600662
oval:org.secpod.oval:def:700587
oval:org.secpod.oval:def:102978
...

© SecPod Technologies