The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Addressbook | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Aug 28, 2015 | Aug 19, 2011 |
| Apple Osx Filecmds | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Aug 19, 2011 |
| Apple Osx Libarchive | — | Apply OS X security update 2015-008 MavericksUpgrade macOS to the latest versionApply OS X security update 2015-005 Yosemite | Mar 29, 2016 | Aug 19, 2011 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Aug 19, 2011 |
| Apple Osx X11 | — | Upgrade macOS to the latest version | Jul 16, 2012 | Aug 19, 2011 |
| Centos_linux | — | Upgrade xorg-x11-libsUpgrade xorg-x11-develUpgrade xorg-x11-font-utilsUpgrade xorg-x11-XnestUpgrade xorg-x11-Mesa-libGLUpgrade xorg-x11-XdmxUpgrade freetype-develUpgrade libXfontUpgrade xorg-x11-Mesa-libGLUUpgrade xorg-x11-sdkUpgrade libXfont-develUpgrade xorg-x11-twmUpgrade xorg-x11-deprecated-libs-develUpgrade xorg-x11-toolsUpgrade xorg-x11-XvfbUpgrade freetypeUpgrade xorg-x11-docUpgrade xorg-x11-xauthUpgrade xorg-x11-xfsUpgrade freetype-utilsUpgrade freetype-demosUpgrade xorg-x11-xdmUpgrade xorg-x11-deprecated-libsUpgrade xorg-x11 | Dec 1, 2016 | Aug 19, 2011 |
| Debian | — | Upgrade libxfont | Jul 30, 2024 | Aug 19, 2011 |
| Freebsd | — | Upgrade FreeBSDUpgrade libXfont | Dec 10, 2025 | Aug 11, 2011 |
| Gentoo Linux | — | Upgrade x11-libs/libXfont. | Oct 30, 2017 | Aug 19, 2011 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 19, 2011 |
| Oracle_linux | — | Upgrade libXfont-develUpgrade libXfont | Oct 16, 2024 | Aug 19, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 10, 2011 |
| Suse | — | Upgrade libXfont1Upgrade freetype2-develUpgrade freetype2Upgrade freetype2-x86Upgrade xorg-x11-libsUpgrade freetype2-32bitUpgrade freetype2-devel-32bitUpgrade xorg-x11-develUpgrade libXfont-develUpgrade ft2demosUpgrade xorg-x11-libs-x86Upgrade xorg-x11-libs-32bitUpgrade xorg-x11-devel-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libxfont1 | Nov 8, 2024 | Aug 19, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub