CVE

Id
43005  
CVE No.
CVE-2010-0421  
Status
Candidate  
Description
Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font"s charmap and the Unicode property database.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468827 43005 CVE-2010-0421 CONFIRM:http://ftp.gnome.org/pub/GNOME/sources/pango/1.27/pango-1.27.1.tar.bz2  View
468828 43005 CVE-2010-0421 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=555831  View
468829 43005 CVE-2010-0421 DEBIAN:DSA-2019  View
468830 43005 CVE-2010-0421 URL:http://www.debian.org/security/2010/dsa-2019  View
468831 43005 CVE-2010-0421 MANDRIVA:MDVSA-2010:121  View
468832 43005 CVE-2010-0421 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:121  View
468833 43005 CVE-2010-0421 REDHAT:RHSA-2010:0140  View
468834 43005 CVE-2010-0421 URL:http://www.redhat.com/support/errata/RHSA-2010-0140.html  View
468835 43005 CVE-2010-0421 SUSE:SUSE-SR:2010:009  View
468836 43005 CVE-2010-0421 URL:http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html  View
468837 43005 CVE-2010-0421 SUSE:SUSE-SR:2010:012  View
468838 43005 CVE-2010-0421 URL:http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html  View
468839 43005 CVE-2010-0421 SUSE:SUSE-SR:2010:013  View
468840 43005 CVE-2010-0421 URL:http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html  View
468841 43005 CVE-2010-0421 BID:38760  View
468842 43005 CVE-2010-0421 URL:http://www.securityfocus.com/bid/38760  View
468843 43005 CVE-2010-0421 OVAL:oval:org.mitre.oval:def:9417  View
468844 43005 CVE-2010-0421 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9417  View
468845 43005 CVE-2010-0421 SECTRACK:1023711  View
468846 43005 CVE-2010-0421 URL:http://securitytracker.com/id?1023711  View
468847 43005 CVE-2010-0421 SECUNIA:39041  View
468848 43005 CVE-2010-0421 URL:http://secunia.com/advisories/39041  View
468849 43005 CVE-2010-0421 VUPEN:ADV-2010-0627  View
468850 43005 CVE-2010-0421 URL:http://www.vupen.com/english/advisories/2010/0627  View
468851 43005 CVE-2010-0421 VUPEN:ADV-2010-0661  View
468852 43005 CVE-2010-0421 URL:http://www.vupen.com/english/advisories/2010/0661  View
468853 43005 CVE-2010-0421 VUPEN:ADV-2010-1552  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35379 JVNDB-2010-001159 Apache HTTP Server の mod_isapi における脆弱性 Windows 上で稼働する Apache HTTP Server の mod_isapi の modules/arch/win32/mod_isapi.c には、リクエストの処理が完了する前に ISAPI .dll モジュールの isapi_unload を呼び出す可能性があるため、詳細不明な脆弱性が存在します。 CVE-2010-0425 43005 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001159.html  View