QwikSec

Security Database

CVE

CWE

Training

CVE-2009-1194

Published: May 11, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_DEBIAN

http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

https://bugzilla.mozilla.org/show_bug.cgi?id=480134

x_refsource_CONFIRM

http://www.ocert.org/advisories/ocert-2009-001.html

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_OSVDB

SUSE-SA:2009:039

vendor-advisory

x_refsource_SUSE

[oss-security] 20090507 [oCERT-2009-001] Pango integer overflow in heap allocation size calculations

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_VUPEN

vdb-entry

x_refsource_BID

https://bugzilla.redhat.com/show_bug.cgi?id=496887

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

https://launchpad.net/bugs/cve/2009-1194

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

http://www.mozilla.org/security/announce/2009/mfsa2009-36.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

SUSE-SA:2009:042

vendor-advisory

x_refsource_SUSE

SUSE-SR:2009:012

vendor-advisory

x_refsource_SUSE

oval:org.mitre.oval:def:10137

vdb-entry

signature

x_refsource_OVAL

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_VUPEN

third-party-advisory

x_refsource_SECUNIA

20090507 [oCERT-2009-001] Pango integer overflow in heap allocation size calculations

mailing-list

x_refsource_BUGTRAQ

pango-pangoglyphstringsetsize-bo(50397)

vdb-entry

x_refsource_XF

vendor-advisory

x_refsource_SUNALERT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.