Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0020
HistoryJan 24, 2011 - 12:00 a.m.

CVE-2011-0020

2011-01-2400:00:00
ubuntu.com
ubuntu.com
11

0.186 Low

EPSS

Percentile

96.2%

Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function
in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when
the FreeType2 backend is enabled, allows user-assisted remote attackers to
cause a denial of service (application crash) or possibly execute arbitrary
code via a crafted font file, related to the glyph box for an FT_Bitmap
object.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchpango1.0< 1.20.5-0ubuntu1.2UNKNOWN
ubuntu9.10noarchpango1.0< 1.26.0-1ubuntu0.1UNKNOWN
ubuntu10.04noarchpango1.0< 1.28.0-0ubuntu2.2UNKNOWN
ubuntu10.10noarchpango1.0< 1.28.2-0ubuntu1.1UNKNOWN