NVD

Id
7199  
Name
CVE-2011-0064  
Description
The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-03-07  
Modified Date
2014-02-11  
Seq
2011-0064  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
40407 7199 CVE-2011-0064 http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9  View
40408 7199 CVE-2011-0064 FEDORA-2011-3194  View
40409 7199 CVE-2011-0064 SUSE-SR:2011:005  View
40410 7199 CVE-2011-0064 1025145  View
40411 7199 CVE-2011-0064 DSA-2178  View
40412 7199 CVE-2011-0064 MDVSA-2011:040  View
40413 7199 CVE-2011-0064 RHSA-2011:0309  View
40414 7199 CVE-2011-0064 46632  View
40415 7199 CVE-2011-0064 USN-1082-1  View
40416 7199 CVE-2011-0064 ADV-2011-0543  View
40417 7199 CVE-2011-0064 ADV-2011-0555  View
40418 7199 CVE-2011-0064 ADV-2011-0558  View
40419 7199 CVE-2011-0064 ADV-2011-0584  View
40420 7199 CVE-2011-0064 ADV-2011-0683  View
40421 7199 CVE-2011-0064 pango-hbbufferensure-bo(65770)  View
40422 7199 CVE-2011-0064 https://bugzilla.mozilla.org/show_bug.cgi?id=606997  View
40423 7199 CVE-2011-0064 https://bugzilla.novell.com/show_bug.cgi?id=672502  View
40424 7199 CVE-2011-0064 https://bugzilla.redhat.com/show_bug.cgi?id=678563  View
40425 7199 CVE-2011-0064 https://build.opensuse.org/request/show/63070  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31057 JVNDB-2011-001296 HarfBuzz の hb-buffer.c 内にある hb_buffer_ensure 関数における任意のコードを実行される脆弱性 HarfBuzz の hb-buffer.c 内にある hb_buffer_ensure 関数は、メモリ再割り当ての成功を検証しないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2011-0064 47971 CVE-2011-0064 7199 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001296.html 2011-03-01 2011-09-14 View