6.8

CVE-2009-1194

Exploit

Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pango ≫ Pango Version <= 1.22
Pango ≫ Pango Version1.2
Pango ≫ Pango Version1.4
Pango ≫ Pango Version1.6
Pango ≫ Pango Version1.8
Pango ≫ Pango Version1.10
Pango ≫ Pango Version1.12
Pango ≫ Pango Version1.14
Pango ≫ Pango Version1.16
Pango ≫ Pango Version1.18
Pango ≫ Pango Version1.20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.85% 0.885
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P