NVD

Id
9616  
Name
CVE-2011-2895  
Description
The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-08-19  
Modified Date
2015-12-11  
Seq
2011-2895  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54897 9616 CVE-2011-2895 http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d11ee5886e9d9ec610051a206b135a4cdc1e09a0  View
54898 9616 CVE-2011-2895 NetBSD-SA2011-007  View
54899 9616 CVE-2011-2895 APPLE-SA-2012-02-01-1  View
54900 9616 CVE-2011-2895 APPLE-SA-2012-05-09-1  View
54901 9616 CVE-2011-2895 APPLE-SA-2015-12-08-1  View
54902 9616 CVE-2011-2895 APPLE-SA-2015-12-08-2  View
54903 9616 CVE-2011-2895 APPLE-SA-2015-12-08-4  View
54904 9616 CVE-2011-2895 APPLE-SA-2015-12-08-3  View
54905 9616 CVE-2011-2895 [xorg-announce] 20110810 X.Org security advisory: libXfont LZW decompression heap corruption  View
54906 9616 CVE-2011-2895 [xorg-announce] 20110810 [ANNOUNCE] libXfont 1.4.4  View
54907 9616 CVE-2011-2895 SUSE-SU-2011:1035  View
54908 9616 CVE-2011-2895 openSUSE-SU-2011:1299  View
54909 9616 CVE-2011-2895 1025920  View
54910 9616 CVE-2011-2895 http://support.apple.com/kb/HT5130  View
54911 9616 CVE-2011-2895 http://support.apple.com/kb/HT5281  View
54912 9616 CVE-2011-2895 DSA-2293  View
54913 9616 CVE-2011-2895 MDVSA-2011:153  View
54914 9616 CVE-2011-2895 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/compress/zopen.c#rev1.17  View
54915 9616 CVE-2011-2895 [oss-security] 20110810 LZW decompression issues  View
54916 9616 CVE-2011-2895 RHSA-2011:1154  View
54917 9616 CVE-2011-2895 RHSA-2011:1155  View
54918 9616 CVE-2011-2895 RHSA-2011:1161  View
54919 9616 CVE-2011-2895 RHSA-2011:1834  View
54920 9616 CVE-2011-2895 49124  View
54921 9616 CVE-2011-2895 USN-1191-1  View
54922 9616 CVE-2011-2895 xorg-lzw-bo(69141)  View
54923 9616 CVE-2011-2895 https://bugzilla.redhat.com/show_bug.cgi?id=725760  View
54924 9616 CVE-2011-2895 https://bugzilla.redhat.com/show_bug.cgi?id=727624  View
54925 9616 CVE-2011-2895 https://support.apple.com/HT205635  View
54926 9616 CVE-2011-2895 https://support.apple.com/HT205637  View
54927 9616 CVE-2011-2895 https://support.apple.com/HT205640  View
54928 9616 CVE-2011-2895 https://support.apple.com/HT205641  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31933 JVNDB-2011-002173 OpenBSD などの製品で使用される LZW decompressor における任意のコードを実行される脆弱性 OpenBSD などの zopen.c で使用される、(1) X.Org libXfont 内の fontfile/decompress.c の BufCompressedFill 関数、および (2) 4.3BSD 内の compress/compress.c の LZW decompressor は、解凍用テーブルに存在しない単語のコード化を適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-2895 50802 CVE-2011-2895 9616 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002173.html 2011-08-10 2015-12-15 View