pango pango CVE-2011-3193 vulnerability in Pango and Other Products
Published on June 16, 2012

product logo product logo product logo product logo product logo product logo
Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2011-3193

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2011-3193 are published in these products:

 
Qt
 
 
 
 
 
 
 
 

Exploit Probability

EPSS
4.64%
Percentile
89.12%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.