Every CVE Search/ Get API key

CVE-2011-2896

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in...

5.1 MediumFix available

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Exploit likelihood

12.0%Up 2.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.1

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Record
CVE-2011-2896
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Record
CVE-2011-2896
Updated
2026-11-02
EUVDEUVD-2011-2869 No score

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Record
EUVD-2011-2869
Updated
2026-11-03
GitHub AdvisoriesGHSA-46mw-xwc9-f8hc No score

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in...

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Record
GHSA-46mw-xwc9-f8hc
Weakness
CWE-787
Updated
2026-11-02
OSV No score

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Record
CVE-2011-2896
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2896 No score

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Record
DEBIAN-CVE-2011-2896
Updated
2026-11-02
OSVopenSUSE-SU-2024:10294-1 No score

gimp-2.8.18-1.4 on GA media

These are all security issues fixed in the gimp-2.8.18-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10294-1
Updated
2026-11-02
OSVUBUNTU-CVE-2011-2896 No score

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.

Record
UBUNTU-CVE-2011-2896
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cups
Debian:12
 before 1.5.0-8
1.5.0-8
cups
Debian:13
 before 1.5.0-8
1.5.0-8
cups
Debian:14
 before 1.5.0-8
1.5.0-8
gimp
Debian:12
 before 2.6.11-5
2.6.11-5
gimp
Debian:13
 before 2.6.11-5
2.6.11-5
gimp
Debian:14
 before 2.6.11-5
2.6.11-5
cups
Debian:6.0
 before 1.4.4-7+squeeze1, plus listed versions
1.4.4-7
1.4.4-7+squeeze1
cups
Debian:5.0
 before 1.3.8-1+lenny10, plus listed versions
1.3.8-1+lenny61.3.8-1+lenny71.3.8-1+lenny81.3.8-1+lenny91.3.8-1lenny4.11.3.8-1lenny5
1.3.8-1+lenny10
gimp
Debian:6.0
 before 2.6.10-1+squeeze3, plus listed versions
2.6.10-12.6.10-1+squeeze1
2.6.10-1+squeeze3
cups
Red Hat:enterprise_linux:6::client
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
Show 72 moreShow less
Affected packages
PackageAffectedFixed
cups-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-devel
Red Hat:enterprise_linux:6::client
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-php
Red Hat:enterprise_linux:6::client
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-libs
Red Hat:enterprise_linux:6::client
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-lpd
Red Hat:enterprise_linux:6::client
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups
Red Hat:enterprise_linux:6::computenode
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-devel
Red Hat:enterprise_linux:6::computenode
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-php
Red Hat:enterprise_linux:6::computenode
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-libs
Red Hat:enterprise_linux:6::computenode
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-lpd
Red Hat:enterprise_linux:6::computenode
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups
Red Hat:enterprise_linux:6::server
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-php
Red Hat:enterprise_linux:6::server
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-devel
Red Hat:enterprise_linux:6::server
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-libs
Red Hat:enterprise_linux:6::server
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-lpd
Red Hat:enterprise_linux:6::server
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups
Red Hat:enterprise_linux:6::workstation
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-php
Red Hat:enterprise_linux:6::workstation
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-devel
Red Hat:enterprise_linux:6::workstation
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-libs
Red Hat:enterprise_linux:6::workstation
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups-lpd
Red Hat:enterprise_linux:6::workstation
 before 1:1.4.2-44.el6
1:1.4.2-44.el6
cups
Red Hat:enterprise_linux:5::client_workstation
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-devel
Red Hat:enterprise_linux:5::client_workstation
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups
Red Hat:enterprise_linux:5::client
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-debuginfo
Red Hat:enterprise_linux:5::client
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-libs
Red Hat:enterprise_linux:5::client
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-lpd
Red Hat:enterprise_linux:5::client
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups
Red Hat:enterprise_linux:5::server
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-debuginfo
Red Hat:enterprise_linux:5::server
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-devel
Red Hat:enterprise_linux:5::server
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-libs
Red Hat:enterprise_linux:5::server
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
cups-lpd
Red Hat:enterprise_linux:5::server
 before 1:1.3.7-30.el5
1:1.3.7-30.el5
gimp
Red Hat:enterprise_linux:6::client
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-debuginfo
Red Hat:enterprise_linux:6::client
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-help-browser
Red Hat:enterprise_linux:6::client
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-libs
Red Hat:enterprise_linux:6::client
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-devel
Red Hat:enterprise_linux:6::client
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-devel-tools
Red Hat:enterprise_linux:6::client
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp
Red Hat:enterprise_linux:6::server
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-debuginfo
Red Hat:enterprise_linux:6::server
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-help-browser
Red Hat:enterprise_linux:6::server
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-libs
Red Hat:enterprise_linux:6::server
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-devel
Red Hat:enterprise_linux:6::server
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-devel-tools
Red Hat:enterprise_linux:6::server
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp
Red Hat:enterprise_linux:6::workstation
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-help-browser
Red Hat:enterprise_linux:6::workstation
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-libs
Red Hat:enterprise_linux:6::workstation
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-devel
Red Hat:enterprise_linux:6::workstation
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp-devel-tools
Red Hat:enterprise_linux:6::workstation
 before 2:2.6.9-4.el6_3.3
2:2.6.9-4.el6_3.3
gimp
Red Hat:enterprise_linux:5::client
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp-debuginfo
Red Hat:enterprise_linux:5::client
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp-libs
Red Hat:enterprise_linux:5::client
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp
Red Hat:enterprise_linux:5::client_workstation
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp-devel
Red Hat:enterprise_linux:5::client_workstation
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp
Red Hat:enterprise_linux:5::server
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp-debuginfo
Red Hat:enterprise_linux:5::server
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp-devel
Red Hat:enterprise_linux:5::server
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
gimp-libs
Red Hat:enterprise_linux:5::server
 before 2:2.2.13-2.0.7.el5_8.5
2:2.2.13-2.0.7.el5_8.5
swi-prolog
Ubuntu:16.04:LTS
 All versions, plus listed versions
7.2.0-27.2.0-37.2.3-2
 None known
swi-prolog
Ubuntu:18.04:LTS
 All versions, plus listed versions
7.4.2+dfsg-27.6.1+dfsg-27.6.1+dfsg-37.6.2+dfsg-17.6.4+dfsg-1build1
 None known
swi-prolog
Ubuntu:20.04:LTS
 All versions, plus listed versions
7.6.4+dfsg-2ubuntu2
 None known
swi-prolog
Ubuntu:22.04:LTS
 All versions, plus listed versions
8.2.4+dfsg-1ubuntu18.4.2+dfsg-2ubuntu1
 None known
swi-prolog
Ubuntu:24.04:LTS
 All versions, plus listed versions
9.0.4+dfsg-2ubuntu19.0.4+dfsg-3ubuntu19.0.4+dfsg-3.1ubuntu39.0.4+dfsg-3.1ubuntu4
 None known
swi-prolog
Ubuntu:25.10
 All versions, plus listed versions
9.0.4+dfsg-3.1ubuntu49.2.9+dfsg-1
 None known
swi-prolog
Ubuntu:26.10
 All versions, plus listed versions
9.2.9+dfsg-1.1build19.2.9+dfsg-1.1ubuntu19.2.9+dfsg-1.1ubuntu3
 None known
swi-prolog
Ubuntu:26.04:LTS
 All versions, plus listed versions
9.2.9+dfsg-19.2.9+dfsg-1.19.2.9+dfsg-1.1build1
 None known
gimp
openSUSE:Tumbleweed
 before 2.8.18-1.4
2.8.18-1.4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2896 is a medium vulnerability (CVSS 5.1) in Apple Cups, published August 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.0%, the 96th percentile. Fixed in cups 1.5.0-8.

References

Show 76 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open