CVE-2011-3170

CVE-2011-3170 describes a heap-based buffer overflow vulnerability in the gif_read_lzw function of CUPS 1.4.8 and earlier, specifically affecting Apple CUPS. This flaw, distinct from CVE-2011-2896, allows remote attackers to potentially execute arbitrary code by supplying a crafted LZW stream that improperly handles the first code word. With a CVSS score of 5.1, the vulnerability has a network attack vector, high attack complexity, and could lead to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB. Furthermore, the CVE has garnered minimal community discussion or media coverage, suggesting a low level of public attention.