CVSS: 9.8EPSS: 11%CPEs: 39EXPL: 5CVE-2011-0020 – Pango Font Parsing - 'pangoft2-render.c' Heap Corruption
https://notcve.org/view.php?id=CVE-2011-0020
24 Jan 2011 — Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object. Desbordamiento de búfer basado en memoria dinámica en la función pango_ft2_font_render_box_glyph en pango/pangoft2-render.c de libpan... • https://www.exploit-db.com/exploits/35232 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-122: Heap-based Buffer Overflow •
CVSS: 9.8EPSS: 4%CPEs: 11EXPL: 1CVE-2009-1194 – pango: pango_glyph_string_set_size integer overflow
https://notcve.org/view.php?id=CVE-2009-1194
11 May 2009 — Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox. Un desbordamiento de entero en la función pango_glyph_string_set_size en pango/glyphstring.c en Pango antes de la versión v1.24 permite causar una denegación ... • http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e • CWE-189: Numeric Errors CWE-190: Integer Overflow or Wraparound •