CVE-2011-0064

The hbbufferensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary...

Mandriva Update for pango MDVSA-2011:040 (pango)

Check for the Version of pango OpenVAS Vulnerability Test Mandriva Update for pango MDVSA-2011:040 pango Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu Update for pango1.0 vulnerabilities USN-1082-1

Ubuntu Update for Linux kernel vulnerabilities USN-1082-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10821.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for pango1.0 vulnerabilities USN-1082-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

USN-1082-1: Pango vulnerabilities

Marc Schoenefeld discovered that Pango incorrectly handled certain Glyph Definition GDEF tables. If a user were tricked into displaying text with a specially-crafted font, an attacker could cause Pango to crash, resulting in a denial of service. This issue only affected Ubuntu 8.04 LTS and 9.10...

Critical: Red Hat Security Advisory: pango security update

Updated pango packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

pango: missing memory reallocation failure checking in hb_buffer_ensure

The hbbufferensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary...

Ubuntu: Security Advisory (USN-945-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-532-1: nagios-plugins vulnerability

Nobuhiro Ban discovered that checkhttp in nagios-plugins did not properly sanitize its input when following redirection requests. A malicious remote web server could cause a denial of service or possibly execute arbitrary code as the user. CVE-2007-5198 Aravind Gottipati discovered that sslutils....