CVE-2011-3193

Published: Jun 16, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Affected (16)

Products: Gnome: Pango · Qt: Qt · Canonical: Ubuntu Linux · +2 more

Show all products

Gnome: Pango · Qt: Qt · Canonical: Ubuntu Linux · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Workstation · Opensuse: Opensuse

1 product

1 product

1 product

4 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Workstation

Opensuse

1 product

Opensuse

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gnome Pango	Before 1.25.1
Qt Qt	Before 4.7.4

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 11.04

Configuration C

10 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Eus	Version 6.1
Redhat Enterprise Linux Server	Version 4.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 4.0
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.3
Opensuse Opensuse	Version 11.4

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (56)

http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65

Source: secalert@redhat.com

PatchThird Party Advisory

http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08

Source: secalert@redhat.com

PatchThird Party Advisory

http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-1323.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-1324.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-1325.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-1326.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-1327.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-1328.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/41537

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/46117

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/46118

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/46119

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/46128

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/46371

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/46410

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/49895

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2011/08/22/6

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/08/24/8

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/08/25/1

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.osvdb.org/75652

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/49723

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1504-1

Source: secalert@redhat.com

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/69991

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://hermes.opensuse.org/messages/12056605

Source: secalert@redhat.com

Broken Link

https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c

Source: secalert@redhat.com

Broken Link

http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65