[Forgot Password]
Login  Register Subscribe

23631

 
 

127000

 
 

102010

 
 

909

 
 

81059

 
 

123

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2011-2896Date: (C)2011-08-19   (M)2018-02-19


The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score  : CVSS Score  : 5.1
Exploit Score: Exploit Score: 4.9
Impact Score : Impact Score : 6.4
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: HIGH
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: PARTIAL
Scope: Integrity: PARTIAL
Confidentiality: Availability: PARTIAL
Integrity:  
Availability:  
  





Reference:
SECTRACK-1025929
SECUNIA-45621
SECUNIA-45900
SECUNIA-45945
SECUNIA-45948
SECUNIA-46024
SECUNIA-48236
SECUNIA-48308
BID-49148
SECUNIA-50737
DSA-2354
FEDORA-2011-11173
FEDORA-2011-11197
FEDORA-2011-11221
FEDORA-2011-11229
FEDORA-2011-11305
FEDORA-2011-11318
GLSA-201209-23
MDVSA-2011:146
MDVSA-2011:167
RHSA-2011:1635
RHSA-2012:1180
RHSA-2012:1181
USN-1207-1
USN-1214-1
http://www.openwall.com/lists/oss-security/2011/08/10/10
http://cups.org/str.php?L3867
http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc
http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4
https://bugzilla.redhat.com/show_bug.cgi?id=727800
https://bugzilla.redhat.com/show_bug.cgi?id=730338

CPE    116
cpe:/a:gnu:gimp:2.6.11
cpe:/a:swi-prolog:swi-prolog:5.6.61
cpe:/a:swi-prolog:swi-prolog:5.6.62
cpe:/a:swi-prolog:swi-prolog:5.6.63
...
CWE    1
CWE-119
OVAL    19
oval:org.secpod.oval:def:301066
oval:org.secpod.oval:def:102944
oval:org.secpod.oval:def:202423
oval:org.secpod.oval:def:202422
...

© 2013 SecPod Technologies