NVD

Id
9877  
Name
CVE-2011-3193  
Description
Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-06-15  
Modified Date
2013-02-07  
Seq
2011-3193  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56682 9877 CVE-2011-3193 http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65  View
56683 9877 CVE-2011-3193 http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08  View
56684 9877 CVE-2011-3193 http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0  View
56685 9877 CVE-2011-3193 openSUSE-SU-2011:1119  View
56686 9877 CVE-2011-3193 openSUSE-SU-2011:1120  View
56687 9877 CVE-2011-3193 RHSA-2011:1323  View
56688 9877 CVE-2011-3193 RHSA-2011:1324  View
56689 9877 CVE-2011-3193 RHSA-2011:1325  View
56690 9877 CVE-2011-3193 RHSA-2011:1326  View
56691 9877 CVE-2011-3193 RHSA-2011:1327  View
56692 9877 CVE-2011-3193 RHSA-2011:1328  View
56693 9877 CVE-2011-3193 [oss-security] 20120822 CVE request: libqt4: two memory issues  View
56694 9877 CVE-2011-3193 [oss-security] 20120824 Re: CVE request: libqt4: two memory issues  View
56695 9877 CVE-2011-3193 [oss-security] 20120825 Re: CVE request: libqt4: two memory issues  View
56696 9877 CVE-2011-3193 49723  View
56697 9877 CVE-2011-3193 USN-1504-1  View
56698 9877 CVE-2011-3193 pango-harfbuzz-bo(69991)  View
56699 9877 CVE-2011-3193 SUSE-SU-2011:1113  View
56700 9877 CVE-2011-3193 https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27049 JVNDB-2012-002756 Qt および Pango で使用される HarfBuzz モジュールにおけるヒープベースのバッファオーバーフローの脆弱性 Qt および Pango で使用される HarfBuzz モジュール (harfbuzz-gpos.c) 内の Lookup_MarkMarkPos 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-3193 51100 CVE-2011-3193 9877 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002756.html 2012-06-16 2012-06-19 View