Back to search
CVE-2011-0020
Published: Jan 24, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://bugzilla.redhat.com/show_bug.cgi?id=671122
x_refsource_CONFIRM
https://bugzilla.gnome.org/show_bug.cgi?id=639882
x_refsource_MISC
https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616
x_refsource_CONFIRM
1024994
vdb-entry
x_refsource_SECTRACK
pango-pango-bo(64832)
vdb-entry
x_refsource_XF
SUSE-SR:2011:005
vendor-advisory
x_refsource_SUSE
[oss-security] 20110118 CVE request: heap corruption in libpango
mailing-list
x_refsource_MLIST
70596
vdb-entry
x_refsource_OSVDB
43100
third-party-advisory
x_refsource_SECUNIA
RHSA-2011:0180
vendor-advisory
x_refsource_REDHAT
[oss-security] 20110120 Re: CVE request: heap corruption in libpango
mailing-list
x_refsource_MLIST
ADV-2011-0186
vdb-entry
x_refsource_VUPEN
42934
third-party-advisory
x_refsource_SECUNIA
45842
vdb-entry
x_refsource_BID
ADV-2011-0238
vdb-entry
x_refsource_VUPEN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now