Bug 3583

Summary:	Security Advisory - cups - CVE-2011-3170
Product:	[Build System, Metadata & Runtime] OE-Core	Reporter:	Li Wang <li.wang>
Component:	core	Assignee:	Li Wang <li.wang>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Medium	CC:	jessica.zhang, meta.mr.watcher, meta.watcher, ross.burton, sgw, song.liu, zhenfeng.zhao
Version:	1.4
Target Milestone:	Future
Hardware:	x86
OS:	Multiple
Whiteboard:	P3
OS type for building Yocto:	---	Type of Regression:	---
Verified:		Documentation change:	---

Description Li Wang 2012-12-13 07:21:26 UTC

The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3170

Comment 1 Ross Burton 2013-03-01 11:04:50 UTC

Integrated into master and will be in 1.3.1