The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Addressbook | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Aug 28, 2015 | Aug 19, 2011 |
| Apple Osx Filecmds | — | Upgrade macOS to the latest versionApply OS X security update 2012-001 | Feb 3, 2012 | Aug 19, 2011 |
| Apple Osx Libarchive | — | Upgrade macOS to the latest versionApply OS X security update 2015-008 MavericksApply OS X security update 2015-005 Yosemite | Mar 29, 2016 | Aug 19, 2011 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Aug 19, 2011 |
| Apple Osx X11 | — | Upgrade macOS to the latest version | Jul 16, 2012 | Aug 19, 2011 |
| Centos_linux | — | Upgrade xorg-x11-deprecated-libsUpgrade freetypeUpgrade xorg-x11-deprecated-libs-develUpgrade libXfont-develUpgrade xorg-x11-docUpgrade xorg-x11-xfsUpgrade freetype-utilsUpgrade xorg-x11Upgrade xorg-x11-xdmUpgrade xorg-x11-XvfbUpgrade xorg-x11-xauthUpgrade xorg-x11-toolsUpgrade xorg-x11-twmUpgrade freetype-demosUpgrade xorg-x11-XnestUpgrade xorg-x11-libsUpgrade xorg-x11-Mesa-libGLUUpgrade xorg-x11-XdmxUpgrade xorg-x11-Mesa-libGLUpgrade xorg-x11-font-utilsUpgrade libXfontUpgrade xorg-x11-develUpgrade xorg-x11-sdkUpgrade freetype-devel | Dec 1, 2016 | Aug 19, 2011 |
| Debian | — | Upgrade libxfont | Jul 30, 2024 | Aug 19, 2011 |
| Freebsd | — | Upgrade libXfontUpgrade FreeBSD | Dec 10, 2025 | Aug 11, 2011 |
| Gentoo Linux | — | Upgrade x11-libs/libXfont. | Oct 30, 2017 | Aug 19, 2011 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 19, 2011 |
| Oracle_linux | — | Upgrade libXfontUpgrade libXfont-devel | Oct 16, 2024 | Aug 19, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 10, 2011 |
| Suse | — | Upgrade freetype2-32bitUpgrade freetype2-x86Upgrade xorg-x11-libsUpgrade freetype2-devel-32bitUpgrade freetype2Upgrade freetype2-develUpgrade libXfont1Upgrade xorg-x11-libs-32bitUpgrade xorg-x11-devel-32bitUpgrade xorg-x11-develUpgrade libXfont-develUpgrade xorg-x11-libs-x86Upgrade ft2demos | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libxfont1 | Nov 8, 2024 | Aug 19, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub