NVD

Id
11977  
Name
CVE-2010-0421  
Description
Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font"s charmap and the Unicode property database.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-03-18  
Modified Date
2010-08-21  
Seq
2010-0421  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
65998 11977 CVE-2010-0421 http://ftp.gnome.org/pub/GNOME/sources/pango/1.27/pango-1.27.1.tar.bz2  View
65999 11977 CVE-2010-0421 SUSE-SR:2010:009  View
66000 11977 CVE-2010-0421 SUSE-SR:2010:012  View
66001 11977 CVE-2010-0421 SUSE-SR:2010:013  View
66002 11977 CVE-2010-0421 oval:org.mitre.oval:def:9417  View
66003 11977 CVE-2010-0421 1023711  View
66004 11977 CVE-2010-0421 DSA-2019  View
66005 11977 CVE-2010-0421 MDVSA-2010:121  View
66006 11977 CVE-2010-0421 RHSA-2010:0140  View
66007 11977 CVE-2010-0421 38760  View
66008 11977 CVE-2010-0421 ADV-2010-0627  View
66009 11977 CVE-2010-0421 ADV-2010-0661  View
66010 11977 CVE-2010-0421 ADV-2010-1552  View
66011 11977 CVE-2010-0421 https://bugzilla.redhat.com/show_bug.cgi?id=555831  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35415 JVNDB-2010-001195 Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性 Pango の pango/opentype/hb-ot-layout.cc の hb_ot_layout_build_glyph_classes 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0421 43001 CVE-2010-0421 11977 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001195.html 2010-03-15 2010-07-20 View