Bug 3583 - Security Advisory - cups - CVE-2011-3170
Summary: Security Advisory - cups - CVE-2011-3170
Status: RESOLVED FIXED
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: core (show other bugs)
Version: 1.4
Hardware: x86 Multiple
: Medium normal
Target Milestone: Future
Assignee: Li Wang
QA Contact:
URL:
Whiteboard: P3
Depends on:
Blocks:
 
Reported: 2012-12-13 07:21 UTC by Li Wang
Modified: 2013-03-01 11:04 UTC (History)
7 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Li Wang 2012-12-13 07:21:26 UTC 
The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3170
Comment 1 Ross Burton 2013-03-01 11:04:50 UTC 
Integrated into master and will be in 1.3.1