Lucene search

K
cvelistMitreCVELIST:CVE-2011-3170
HistoryAug 19, 2011 - 5:00 p.m.

CVE-2011-3170

2011-08-1917:00:00
mitre
www.cve.org
2

8 High

AI Score

Confidence

High

0.557 Medium

EPSS

Percentile

97.7%

The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.