Lucene search
K

20 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:51 a.m.2 views

SUSE CVE-2011-3193

Heap-based buffer overflow in the LookupMarkMarkPos function in the HarfBuzz module harfbuzz-gpos.c, as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted font file...

9.3CVSS8.1AI score0.07543EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2020/12/15 12:0 a.m.14 views

Virtuozzo 7 : pango / pango-devel / pango-tests (VZLSA-2019-2571)

An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS7.9AI score0.06274EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2019/10/29 2:13 p.m.4 views

pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

A buffer overflow flaw was found in Gnome Pango. When invalid utf-8 strings are passed to functions, a heap-based buffer overflow can occur that could lead to code execution. The highest threat from this vulnerability is data confidentiality and integrity as well as system availability...

9.8CVSS7.6AI score0.06274EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2019/08/29 6:52 a.m.3 views

pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

A buffer overflow flaw was found in Gnome Pango. When invalid utf-8 strings are passed to functions, a heap-based buffer overflow can occur that could lead to code execution. The highest threat from this vulnerability is data confidentiality and integrity as well as system availability...

9.8CVSS7.6AI score0.06274EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2019/08/28 5:53 p.m.149 views

Important: Red Hat Security Advisory: pango security update

An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS7.4AI score0.06274EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2019/08/28 12:0 a.m.31 views

Oracle Linux 7 : pango (ELSA-2019-2571)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2571 advisory. - Security fix for CVE-2019-1010238 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

9.8CVSS8.1AI score0.06274EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.4 views

The vulnerability of the pango_log2vis_get_embedding_levels function in the Pango library allows a hacker to execute arbitrary code.

The vulnerability of the pangolog2visgetembeddinglevels function in the Pango library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.06274EPSS
Exploits1References9Affected Software7
Debian
Debian
added 2019/08/11 3:18 p.m.63 views

[SECURITY] [DSA 4496-1] pango1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4496-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2019 https://www.debian.org/security/faq -...

9.8CVSS9.8AI score0.06274EPSS
Exploits1
OSV
OSV
added 2018/08/22 5:22 p.m.3 views

USN-3750-1 pango1.0 vulnerability

Jeffrey M. discovered that Pango incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service...

6.5CVSS6.6AI score0.11499EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.20 views

CentOS Update for evolution28-pango CESA-2011:0180 centos4 x86_64

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2011:0180 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

7.6CVSS6.4AI score0.18944EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.33 views

CentOS Update for evolution28-pango CESA-2011:0180 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.6CVSS5.2AI score0.18944EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2012/07/09 12:0 a.m.29 views

RedHat Update for pango RHSA-2011:0309-01

Check for the Version of pango OpenVAS Vulnerability Test RedHat Update for pango RHSA-2011:0309-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

6.8CVSS9.5AI score0.03333EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/09/23 12:0 a.m.26 views

RedHat Update for evolution28-pango RHSA-2011:1325-01

Check for the Version of evolution28-pango OpenVAS Vulnerability Test RedHat Update for evolution28-pango RHSA-2011:1325-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

9.3CVSS6.4AI score0.07543EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/09/23 12:0 a.m.29 views

CentOS Update for evolution28-pango CESA-2011:1325 centos4 i386

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2011:1325 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

9.3CVSS6.4AI score0.07543EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.20 views

CentOS Update for pango CESA-2010:0140 centos5 i386

Check for the Version of pango OpenVAS Vulnerability Test CentOS Update for pango CESA-2010:0140 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

4.3CVSS6.4AI score0.02448EPSS
Exploits0References2
securityvulns
securityvulns
added 2011/03/03 12:0 a.m.31 views

Pango library NULL pointer dereference

Memory allocations are not controlled...

6.8CVSS3.2AI score0.03333EPSS
Exploits0References1Affected Software1
securityvulns
securityvulns
added 2010/03/23 12:0 a.m.35 views

Pango library array index overflow

Array index overflow on font file parsing...

4.3CVSS4.8AI score0.02448EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2010/03/22 12:0 a.m.34 views

CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

4.3CVSS6.4AI score0.02448EPSS
Exploits0References2
OSV
OSV
added 2009/05/10 12:0 a.m.11 views

DSA-1798-1 pango1.0 - arbitrary code execution

Bulletin has no description...

6.8CVSS6.3AI score0.0413EPSS
Exploits2
securityvulns
securityvulns
added 2009/05/07 12:0 a.m.43 views

Pango library integer overflow

Integer overflow leading to heap buffer overflow...

6.8CVSS3.2AI score0.0413EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder