NVD Vulnerability Detail

CVE-2011-2896

Summary	The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.
Publication Date	Aug. 20, 2011, 2:55 a.m.
Registration Date	Jan. 28, 2021, 4:39 p.m.
Last Update	Nov. 21, 2024, 10:29 a.m.

CVSS2.0 : MEDIUM
Score	5.1
Vector	AV:N/AC:H/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	高
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	はい

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:swi-prolog:swi-prolog::::::::			5.10.4

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:apple:cups::::::::			1.4.6

Configuration3		or higher	or less	more than	less than
cpe:2.3:a:gimp:gimp::::::::			2.6.11

Related information, measures and tools

No	URL	タグ
1	http://cups.org/str.php?L3867	Patch Third Party Advisory
2	http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc	Patch Vendor Advisory
3	http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064600.html	Third Party Advisory
4	http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064873.html	Third Party Advisory
5	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065527.html	Third Party Advisory
6	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html	Third Party Advisory
7	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065550.html	Third Party Advisory
8	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065651.html	Third Party Advisory
9	http://rhn.redhat.com/errata/RHSA-2012-1180.html	Third Party Advisory
10	http://rhn.redhat.com/errata/RHSA-2012-1181.html	Third Party Advisory
11	http://secunia.com/advisories/45621	Broken Link
12	http://secunia.com/advisories/45900	Broken Link
13	http://secunia.com/advisories/45945	Broken Link
14	http://secunia.com/advisories/45948	Broken Link
15	http://secunia.com/advisories/46024	Broken Link
16	http://secunia.com/advisories/48236	Broken Link
17	http://secunia.com/advisories/48308	Broken Link
18	http://secunia.com/advisories/50737	Broken Link
19	http://security.gentoo.org/glsa/glsa-201209-23.xml	Third Party Advisory
20	http://www.debian.org/security/2011/dsa-2354	Third Party Advisory
21	http://www.debian.org/security/2012/dsa-2426	Third Party Advisory
22	http://www.mandriva.com/security/advisories?name=MDVSA-2011:146	Broken Link
23	http://www.mandriva.com/security/advisories?name=MDVSA-2011:167	Broken Link
24	http://www.openwall.com/lists/oss-security/2011/08/10/10	Mailing List Patch Third Party Advisory
25	http://www.redhat.com/support/errata/RHSA-2011-1635.html	Broken Link
26	http://www.securityfocus.com/bid/49148	Broken Link Third Party Advisory VDB Entry
27	http://www.securitytracker.com/id?1025929	Broken Link Third Party Advisory VDB Entry
28	http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4	Issue Tracking Third Party Advisory
29	http://www.ubuntu.com/usn/USN-1207-1	Third Party Advisory
30	http://www.ubuntu.com/usn/USN-1214-1	Third Party Advisory
31	https://bugzilla.redhat.com/show_bug.cgi?id=727800	Issue Tracking Patch Third Party Advisory
32	https://bugzilla.redhat.com/show_bug.cgi?id=730338	Issue Tracking Third Party Advisory
33	http://cups.org/str.php?L3867	Patch Third Party Advisory
34	https://bugzilla.redhat.com/show_bug.cgi?id=730338	Issue Tracking Third Party Advisory
35	https://bugzilla.redhat.com/show_bug.cgi?id=727800	Issue Tracking Patch Third Party Advisory
36	http://www.ubuntu.com/usn/USN-1214-1	Third Party Advisory
37	http://www.ubuntu.com/usn/USN-1207-1	Third Party Advisory
38	http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4	Issue Tracking Third Party Advisory
39	http://www.securitytracker.com/id?1025929	Broken Link Third Party Advisory VDB Entry
40	http://www.securityfocus.com/bid/49148	Broken Link Third Party Advisory VDB Entry
41	http://www.redhat.com/support/errata/RHSA-2011-1635.html	Broken Link
42	http://www.openwall.com/lists/oss-security/2011/08/10/10	Mailing List Patch Third Party Advisory
43	http://www.mandriva.com/security/advisories?name=MDVSA-2011:167	Broken Link
44	http://www.mandriva.com/security/advisories?name=MDVSA-2011:146	Broken Link
45	http://www.debian.org/security/2012/dsa-2426	Third Party Advisory
46	http://www.debian.org/security/2011/dsa-2354	Third Party Advisory
47	http://security.gentoo.org/glsa/glsa-201209-23.xml	Third Party Advisory
48	http://secunia.com/advisories/50737	Broken Link
49	http://secunia.com/advisories/48308	Broken Link
50	http://secunia.com/advisories/48236	Broken Link
51	http://secunia.com/advisories/46024	Broken Link
52	http://secunia.com/advisories/45948	Broken Link
53	http://secunia.com/advisories/45945	Broken Link
54	http://secunia.com/advisories/45900	Broken Link
55	http://secunia.com/advisories/45621	Broken Link
56	http://rhn.redhat.com/errata/RHSA-2012-1181.html	Third Party Advisory
57	http://rhn.redhat.com/errata/RHSA-2012-1180.html	Third Party Advisory
58	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065651.html	Third Party Advisory
59	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065550.html	Third Party Advisory
60	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html	Third Party Advisory
61	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065527.html	Third Party Advisory
62	http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064873.html	Third Party Advisory
63	http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064600.html	Third Party Advisory
64	http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc	Patch Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-787	境界外書き込み	https://cwe.mitre.org/data/definitions/787.html

JVN Vulnerability Information

CUPS などの製品で使用される LZW デコンプレッサにおける無限ループの脆弱性

Title	CUPS などの製品で使用される LZW デコンプレッサにおける無限ループの脆弱性
Summary	CUPS の gif_read_lzw 関数、GIMPの LZWReadByte 関数、SWI-Prolog の LZWReadByte などで使用されている PBMPLUS の LZW でコンプレッサには、解凍テーブルに欠落が存在した場合にコード文字を適切に処理しないため、無限ループまたはヒープベースのバッファオーバーフローを誘発され、任意のコードを実行される脆弱性が存在します。本問題は、CVE-2006-1168 および CVE-2011-2895 に関連する可能性があります。
Possible impacts	第三者により、巧妙に細工された圧縮ストリームを介して、無限ループの状態にされる、および任意のコードを実行される可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Aug. 19, 2011, midnight
Registration Date	March 27, 2012, 6:43 p.m.
Last Update	March 27, 2012, 6:43 p.m.

Affected System

アップル

CUPS 1.4.7 未満

The GIMP Team

GIMP 2.6.11 およびそれ以前

SWI-Prolog

SWI-Prolog 5.10.4 およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-2896	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2896
National Vulnerability Database (NVD)
2	CVE-2011-2896	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-2896

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Apple
1	Apple Open Source	http://www.apple.com/opensource/
GIMP
2	Top Page	http://www.gimp.org/
SWI-Prolog
3	Bug 7	http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4

Change Log

No	Changed Details	Date of change
0	[2012年03月27日] 掲載	Feb. 17, 2018, 10:37 a.m.