NetSight
IP …
critical9.3

CVE-2011-3193

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote att…

Impact

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Affected products

VendorProductAffected versions
GnomePango
before 1.25.1
QtQt
before 4.7.4
CanonicalUbuntu Linux
Versions 10.04, 11.04
RedhatEnterprise Linux Desktop
Versions 4.0, 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.1
RedhatEnterprise Linux Server
Versions 4.0, 5.0, 6.0
RedhatEnterprise Linux Workstation
Versions 4.0, 5.0, 6.0
OpensuseOpensuse
Versions 11.3, 11.4

Weakness classification

CWE-787

References