NVD

Id
48486  
Name
CVE-2009-1194  
Description
Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-05-11  
Modified Date
2010-08-21  
Seq
2009-1194  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244392 48486 CVE-2009-1194 http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e  View
244393 48486 CVE-2009-1194 SUSE-SR:2009:012  View
244394 48486 CVE-2009-1194 SUSE-SA:2009:039  View
244395 48486 CVE-2009-1194 SUSE-SA:2009:042  View
244396 48486 CVE-2009-1194 oval:org.mitre.oval:def:10137  View
244397 48486 CVE-2009-1194 264308  View
244398 48486 CVE-2009-1194 DSA-1798  View
244399 48486 CVE-2009-1194 http://www.mozilla.org/security/announce/2009/mfsa2009-36.html  View
244400 48486 CVE-2009-1194 http://www.ocert.org/advisories/ocert-2009-001.html  View
244401 48486 CVE-2009-1194 [oss-security] 20090507 [oCERT-2009-001] Pango integer overflow in heap allocation size calculations  View
244402 48486 CVE-2009-1194 RHSA-2009:0476  View
244403 48486 CVE-2009-1194 20090507 [oCERT-2009-001] Pango integer overflow in heap allocation size calculations  View
244404 48486 CVE-2009-1194 34870  View
244405 48486 CVE-2009-1194 35758  View
244406 48486 CVE-2009-1194 1022196  View
244407 48486 CVE-2009-1194 USN-773-1  View
244408 48486 CVE-2009-1194 ADV-2009-1269  View
244409 48486 CVE-2009-1194 ADV-2009-1972  View
244410 48486 CVE-2009-1194 pango-pangoglyphstringsetsize-bo(50397)  View
244411 48486 CVE-2009-1194 https://bugzilla.mozilla.org/show_bug.cgi?id=480134  View
244412 48486 CVE-2009-1194 https://bugzilla.redhat.com/show_bug.cgi?id=496887  View
244413 48486 CVE-2009-1194 https://launchpad.net/bugs/cve/2009-1194  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40291 JVNDB-2009-001297 Pango の pango_glyph_string_set_size 関数 における整数オーバーフローの脆弱性 Pango の pango/glyphstring.c にある pango_glyph_string_set_size 関数には、長大なグリフ文字列に関連する処理に不備があるため、サービス運用妨害 (DoS) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-1194 38625 CVE-2009-1194 48486 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001297.html 2009-05-08 2010-02-17 View