Buffer overflow in Apple Cups

CVE-2011-3170

The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary…

Vulnerability class: Buffer Overflow

EPSS: 0.091 (92.8th percentile) — read the EPSS interpretation.

Affected products

  • Apple Cups — versions 1.1, 1.1.1, 1.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References