Debian Pango1.0 vulnerabilities

CVE-2011-0020 [HIGH] CVE-2011-0020: pango1.0 - Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pa... Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitma

CVE-2018-15120 [MEDIUM] CVE-2018-15120: pango1.0 - libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, ... libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences. Scope: local bookworm: resolved (fixed in 1.42.4-1) bullseye: resolved (fixed in 1.42.4-1) forky: resolved (fixed in 1.42

CVE-2019-1010238 [CRITICAL] CVE-2019-1010238: pango1.0 - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The h... Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pang

CVE-2011-3193 [CRITICAL] CVE-2011-3193: pango1.0 - Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz mo... Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file. Scope: local bookworm: resolved (fixed in 1.28.3-1) bullseye: resolved (fixed in 1.28.3-1) forky: res

CVE-2011-0064 [MEDIUM] CVE-2011-0064: pango1.0 - The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.... The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorr

CVE-2009-1194 [MEDIUM] CVE-2009-1194: pango1.0 - Integer overflow in the pango_glyph_string_set_size function in pango/glyphstrin... Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox. Scope: local

CVE-2010-0421 [MEDIUM] CVE-2010-0421: pango1.0 - Array index error in the hb_ot_layout_build_glyph_classes function in pango/open... Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database. Scop