CVE-2009-1194
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.1%
Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.
Produtos afetados
n/a · n/aReferências
http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5ehttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.htmlhttp://osvdb.org/54279https://bugzilla.mozilla.org/show_bug.cgi?id=480134https://bugzilla.redhat.com/show_bug.cgi?id=496887http://secunia.com/advisories/35018http://secunia.com/advisories/35021http://secunia.com/advisories/35027http://secunia.com/advisories/35038http://secunia.com/advisories/35685