Mandriva Linux Security Advisory : pango (MDVSA-2011:020)

A vulnerability has been found and corrected in pango : Heap-based buffer overflow in the pangoft2fontrenderboxglyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of servi...

RedHat Update for pango RHSA-2011:0180-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for pango RHSA-2011:0180-01

Check for the Version of pango OpenVAS Vulnerability Test RedHat Update for pango RHSA-2011:0180-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

RHEL 4 / 5 / 6 : pango (RHSA-2011:0180)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0180 advisory. - pango: Heap-based buffer overflow by rendering glyph box for certain FTBitmap objects CVE-2011-0020 Note that Nessus has not tested for thi...

pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects

Heap-based buffer overflow in the pangoft2fontrenderboxglyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code...

Moderate: Red Hat Security Advisory: pango security update

Updated pango and evolution28-pango packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

pango security update

1.28.1-3.el60.3 - Fix a division by zero found in testing 1.28.1-3.el60.2 - Use -fno-strict-aliasing for C++, too - Escape macros in %changelog 1.28.1-3.el60.1 - Prevent heap corruption with malformed fonts. CVE-2011-0020 - Resolves: 671529...

DEBIAN-CVE-2011-0020

Heap-based buffer overflow in the pangoft2fontrenderboxglyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code...

Heap overflow

Heap-based buffer overflow in the pangoft2fontrenderboxglyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code...

CVE-2011-0020

CVE-2011-0020: Heap-based buffer overflow in Pango’s FreeType2 path (pango_ft2_font_render_box_glyph in libpango, older than or equal to 1.28.3) can crash the target application or allow arbitrary code execution via a crafted font. Affected products include libpango packages built with the FreeTy...

CVE-2011-0020

Heap-based buffer overflow in the pangoft2fontrenderboxglyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code...

CVE-2011-0020

Heap-based buffer overflow in the pangoft2fontrenderboxglyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code...

CVE-2011-0020

Heap-based buffer overflow in the pangoft2fontrenderboxglyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code...

Pango Font Parsing - pangoft2-render.c Heap Corruption

Pango Font Parsing - pangoft2-render.c Heap Corruption source: https://www.securityfocus.com/bid/45842/info Pango is prone to a remote heap-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempt...

Pango Font Parsing - 'pangoft2-render.c' Heap Corruption

source: https://www.securityfocus.com/bid/45842/info Pango is prone to a remote heap-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition...

SuSE 10 Security Update : firefox3-pango (ZYPP Patch Number 7097)

Long glyph string could trigger a heap-based buffer overflow in pango. CVE-2009-1194 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid50080; scriptversion"1.11";...

SuSE 10 Security Update : pango (ZYPP Patch Number 6800)

A long glyph string can trigger a heap-based buffer overflow in pango. CVE-2009-1194 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid49911; scriptversion"1.11";...

SuSE 10 Security Update : pango (ZYPP Patch Number 6895)

This update of pango fixes a memory corruption bug that can possibly be exploited to execute arbitrary code remotely. This bug could occur while processing fonts from untrusted sources. CVE-2010-0421 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

MDVA-2009:211 : pango

A bug in pango was preventing correct location of some glyphs when scaling was in effect. This update fixes this issue and enforce version dependency on cairo, which could cause crashes when upgrading Mandriva Linux distribution to release 2010.0. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

Mandriva Update for pango MDVSA-2010:121 (pango)

Check for the Version of pango OpenVAS Vulnerability Test Mandriva Update for pango MDVSA-2010:121 pango Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...