[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-2896

Date: (C)2011-08-19   (M)2016-03-13
 
CVSS Score: 5.1Access Vector: NETWORK
Exploitability Subscore: 4.9Access Complexity: HIGH
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Reference:
SECTRACK-1025929
SECUNIA-45621
SECUNIA-45900
SECUNIA-45945
SECUNIA-45948
SECUNIA-46024
BID-49148
SECUNIA-50737
DSA-2354
FEDORA-2011-11173
FEDORA-2011-11197
FEDORA-2011-11221
FEDORA-2011-11229
FEDORA-2011-11305
FEDORA-2011-11318
GLSA-201209-23
MDVSA-2011:146
MDVSA-2011:167
RHSA-2011:1635
RHSA-2012:1180
RHSA-2012:1181
USN-1207-1
USN-1214-1
http://www.openwall.com/lists/oss-security/2011/08/10/10
http://cups.org/str.php?L3867
http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc
http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4
https://bugzilla.redhat.com/show_bug.cgi?id=727800
https://bugzilla.redhat.com/show_bug.cgi?id=730338

CPE    116
cpe:/a:swi-prolog:swi-prolog:5.6.61
cpe:/a:swi-prolog:swi-prolog:5.6.62
cpe:/a:swi-prolog:swi-prolog:5.6.63
cpe:/a:swi-prolog:swi-prolog:5.6.64
...
CWE    1
CWE-119
OVAL    19
oval:org.secpod.oval:def:102944
oval:org.secpod.oval:def:103100
oval:org.secpod.oval:def:102830
oval:org.secpod.oval:def:301127
...

© 2013 SecPod Technologies