The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2011-08-19 17:55
Updated : 2024-02-04 17:54
NVD link : CVE-2011-3170
Mitre link : CVE-2011-3170
CVE.ORG link : CVE-2011-3170
JSON object : View
Products Affected
apple
- cups
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer