Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2011-2896 Details

Description

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://cups.org/str.php?L3867	CVE	PatchThird Party Advisory
http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc	CVE	PatchVendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064600.html	CVE	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064873.html	CVE	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065527.html	CVE	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html	CVE	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065550.html	CVE	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065651.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1180.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1181.html	CVE	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=727800	CVE	Issue TrackingPatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=730338	CVE	Issue TrackingThird Party Advisory
http://secunia.com/advisories/45621	CVE	Broken Link
http://secunia.com/advisories/45900	CVE	Broken Link
http://secunia.com/advisories/45945	CVE	Broken Link
http://secunia.com/advisories/45948	CVE	Broken Link
http://secunia.com/advisories/46024	CVE	Broken Link
http://secunia.com/advisories/48236	CVE	Broken Link
http://secunia.com/advisories/48308	CVE	Broken Link
http://secunia.com/advisories/50737	CVE	Broken Link
http://security.gentoo.org/glsa/glsa-201209-23.xml	CVE	Third Party Advisory
http://www.debian.org/security/2011/dsa-2354	CVE	Third Party Advisory
http://www.debian.org/security/2012/dsa-2426	CVE	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:146	CVE	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2011:167	CVE	Broken Link
http://www.openwall.com/lists/oss-security/2011/08/10/10	CVE	Mailing ListPatchThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2011-1635.html	CVE	Broken Link
http://www.securityfocus.com/bid/49148	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1025929	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4	CVE	Issue TrackingThird Party Advisory
http://www.ubuntu.com/usn/USN-1207-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-1214-1	CVE	Third Party Advisory
http://cups.org/str.php?L3867	[email protected]	PatchThird Party Advisory
http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc	[email protected]	PatchVendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064600.html	[email protected]	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064873.html	[email protected]	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065527.html	[email protected]	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html	[email protected]	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065550.html	[email protected]	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065651.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1180.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1181.html	[email protected]	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=727800	[email protected]	Issue TrackingPatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=730338	[email protected]	Issue TrackingThird Party Advisory
http://secunia.com/advisories/45621	[email protected]	Broken Link
http://secunia.com/advisories/45900	[email protected]	Broken Link
http://secunia.com/advisories/45945	[email protected]	Broken Link
http://secunia.com/advisories/45948	[email protected]	Broken Link
http://secunia.com/advisories/46024	[email protected]	Broken Link
http://secunia.com/advisories/48236	[email protected]	Broken Link
http://secunia.com/advisories/48308	[email protected]	Broken Link
http://secunia.com/advisories/50737	[email protected]	Broken Link
http://security.gentoo.org/glsa/glsa-201209-23.xml	[email protected]	Third Party Advisory
http://www.debian.org/security/2011/dsa-2354	[email protected]	Third Party Advisory
http://www.debian.org/security/2012/dsa-2426	[email protected]	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:146	[email protected]	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2011:167	[email protected]	Broken Link
http://www.openwall.com/lists/oss-security/2011/08/10/10	[email protected]	Mailing ListPatchThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2011-1635.html	[email protected]	Broken Link
http://www.securityfocus.com/bid/49148	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1025929	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4	[email protected]	Issue TrackingThird Party Advisory
http://www.ubuntu.com/usn/USN-1207-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-1214-1	[email protected]	Third Party Advisory

see all 64 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]

Affected Products

Product	Versions
swi-prolog swi-prolog	<= 5.10.4
CPE cpe:2.3:a:swi-prolog:swi-prolog:::::::: Remediation No remediation found in references.
apple cups	<= 1.4.6
CPE cpe:2.3:a:apple:cups:::::::: Remediation No remediation found in references.
gimp gimp	<= 2.6.11
CPE cpe:2.3:a:gimp:gimp:::::::: Remediation No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 7, 2022	Modified Analysis	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Jul 21, 2018	CVE Modified	[email protected]
Jan 6, 2018	CVE Modified	[email protected]
Jan 5, 2018	CVE Modified	[email protected]
Aug 22, 2011	Initial Analysis	[email protected]

CVE-2011-2896 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO