CVE-2011-3170

The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote…

published August 19, 2011

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03948 · 90.3th percentile
Published
2011-08-19T17:00Z
EPSS history
Timeline
  • 19 AUG 17:00Z
    The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote…
    cvelistv5