SuSE 11.1 Security Update : pango (SAT Patch Number 4065)

Specially crafted font files could cause a heap corruption in applications linked against pango. CVE-2011-0064 / CVE-2011-0020 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

Fedora Update for pango FEDORA-2011-3194

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pango FEDORA-2011-3194

Check for the Version of pango OpenVAS Vulnerability Test Fedora Update for pango FEDORA-2011-3194 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora 14 : pango-1.28.1-5.fc14 (2011-3194)

It was discovered that pango did not check for memory reallocation failures in hbbufferensure function. This could trigger a NULL pointer dereference in hbbufferaddglyph, where possibly untrusted input is used as an index used for accessing members of the incorrectly reallocated array, resulting ...

[SECURITY] Fedora 14 Update: pango-1.28.1-5.fc14

Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango can be used anywhere that text layout is nee ded, though most of the work on Pango so far has been done in the context of the GTK+ widget toolkit. Pango forms the core of text and font handlin...

CVE-2011-0064

The hbbufferensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary...

Null pointer dereference

The hbbufferensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary...

CVE-2011-0064

The hbbufferensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary...

CVE-2011-0064

The CVE-2011-0064 issue affects HarfBuzz’s hb_buffer_ensure() as used by Pango (notably in Pango 1.28.3) and other products, where memory reallocations are not verified, potentially causing a NULL pointer dereference leading to a crash or, via crafted OpenType data triggering an incorrect index, ...

Mandriva Update for pango MDVSA-2011:040 (pango)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-0064: Undefined Security Weakness

The hbbufferensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary...

Mandriva Linux Security Advisory : pango (MDVSA-2011:040)

A vulnerability has been found and corrected in pango : It was discovered that pango did not check for memory reallocation failures in hbbufferensure function. This could trigger a NULL pointer dereference in hbbufferaddglyph, where possibly untrusted input is used as an index used for accessing...

Pango library NULL pointer dereference

Memory allocations are not controlled...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : pango1.0 vulnerabilities (USN-1082-1)

Marc Schoenefeld discovered that Pango incorrectly handled certain Glyph Definition GDEF tables. If a user were tricked into displaying text with a specially crafted font, an attacker could cause Pango to crash, resulting in a denial of service. This issue only affected Ubuntu 8.04 LTS and 9.10...

USN-1082-1: Pango vulnerabilities

Marc Schoenefeld discovered that Pango incorrectly handled certain Glyph Definition GDEF tables. If a user were tricked into displaying text with a specially-crafted font, an attacker could cause Pango to crash, resulting in a denial of service. This issue only affected Ubuntu 8.04 LTS and 9.10...

RHEL 6 : pango (RHSA-2011:0309)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0309 advisory. Pango is a library used for the layout and rendering of internationalized text. It was discovered that Pango did not check for memory reallocation...

DSA-2178-1 pango1.0 - NULL pointer dereference

Bulletin has no description...

Critical: Red Hat Security Advisory: pango security update

Updated pango packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

pango security update

1.28.1-3.el60.5 - Prevent an integer overflow in hbbufferensure Related: 679693 1.28.1-3.el60.4 - Check for realloc failures in hbbufferensure CVE-2011-0064...

CVE-2011-0064

The hbbufferensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary...