Is CVE-2011-2895 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 8%.

What products does CVE-2011-2895 affect?

Tracked products affected include FreeType. Check the version you run to see whether it is affected.

How do I fix CVE-2011-2895?

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

← All products

CVE-2011-2895

Q: What is CVE-2011-2895?

CVE-2011-2895 is a high-severity software vulnerability (Memory corruption) with a CVSS score of 9.3. The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3

HIGH severity · CVSS 9.3 · Memory corruption

9.3CVSS HIGH

Summary

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

Impact & exploitability

Attack vectorNetwork

Attack complexity—

Privileges required—

User interaction—

Confidentiality impact—

Integrity impact—

Availability impact—

Exploit probability (EPSS)8%

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products we track (1)

FreeType

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d11ee5886e9d9ec610051a206b135a4cdc1e09a0 ↗

CVE-2011-2895

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information