CVE-2011-0020

Published: Jan 24, 2011Modified: Apr 29, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.

Affected (39)

Products: Gnome: Pango · Pango: Pango

1 product

1 product

Configuration A

39 vulnerable

Vulnerable Software	Affected Versions
Gnome Pango	Up to 1.28.3
Gnome Pango	Version 1.28.0
Gnome Pango	Version 1.28.1
Gnome Pango	Version 1.28.2
Pango Pango	Version 0.20
Pango Pango	Version 0.21
Pango Pango	Version 0.22
Pango Pango	Version 0.23
Pango Pango	Version 0.24
Pango Pango	Version 0.25
Pango Pango	Version 0.26
Pango Pango	Version 1.0
Pango Pango	Version 1.10
Pango Pango	Version 1.11
Pango Pango	Version 1.12
Pango Pango	Version 1.13
Pango Pango	Version 1.14
Pango Pango	Version 1.15
Pango Pango	Version 1.16
Pango Pango	Version 1.17
Pango Pango	Version 1.18
Pango Pango	Version 1.19
Pango Pango	Version 1.1
Pango Pango	Version 1.20
Pango Pango	Version 1.21
Pango Pango	Version 1.22
Pango Pango	Version 1.23
Pango Pango	Version 1.24
Pango Pango	Version 1.25
Pango Pango	Version 1.26
Pango Pango	Version 1.27
Pango Pango	Version 1.2
Pango Pango	Version 1.3
Pango Pango	Version 1.4
Pango Pango	Version 1.5
Pango Pango	Version 1.6
Pango Pango	Version 1.7
Pango Pango	Version 1.8
Pango Pango	Version 1.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (30)

http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/18/6

Source: secalert@redhat.com

Exploit

http://openwall.com/lists/oss-security/2011/01/20/2

Source: secalert@redhat.com

Exploit

http://osvdb.org/70596

Source: secalert@redhat.com

http://secunia.com/advisories/42934

Source: secalert@redhat.com

http://secunia.com/advisories/43100

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0180.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/45842

Source: secalert@redhat.com

http://www.securitytracker.com/id?1024994

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0186

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0238

Source: secalert@redhat.com

https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616

Source: secalert@redhat.com

Exploit

https://bugzilla.gnome.org/show_bug.cgi?id=639882

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=671122

Source: secalert@redhat.com

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/64832

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/01/18/6

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://openwall.com/lists/oss-security/2011/01/20/2

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://osvdb.org/70596

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42934

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43100

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0180.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/45842

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1024994

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0186

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0238

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://bugzilla.gnome.org/show_bug.cgi?id=639882

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=671122

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/64832

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.