https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:57:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-03486 bdu:2015-03486 https://cve.radiocsirt.org/vuln/bdu:2015-03486 https://cve.radiocsirt.org/vuln/certa-2011-avi-673 certa-2011-avi-673 https://cve.radiocsirt.org/vuln/certa-2011-avi-673 https://cve.radiocsirt.org/vuln/euvd-2026-115841 EUVD-2026-115841 https://cve.radiocsirt.org/vuln/euvd-2026-115841 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2895 <p>The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.</p> <p>The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-2895 https://cve.radiocsirt.org/vuln/ghsa-8hvp-h85w-jwq9 <p>The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.</p> <p>The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.</p> https://cve.radiocsirt.org/vuln/ghsa-8hvp-h85w-jwq9 https://cve.radiocsirt.org/vuln/gsd-2011-2895 gsd-2011-2895 https://cve.radiocsirt.org/vuln/gsd-2011-2895 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10169-1 <p>xorg-x11-devel-7.6-47.2 on GA media</p> <p>xorg-x11-devel-7.6-47.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10169-1 https://cve.radiocsirt.org/vuln/rhsa-2011:1154 <p>BSD compress LZW decoder buffer overflow</p> <p>BSD compress LZW decoder buffer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2011:1154