CVE-2011-3193
- State
- Published
- Severity
- Not scored
- Published
- Jun 16, 2012
- Updated
- Aug 6, 2024
- Reserved
- Aug 19, 2011
Description
Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 46371third-party-advisory
- http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0
- USN-1504-1vendor-advisory
- [oss-security] 20120824 Re: CVE request: libqt4: two memory issuesmailing-list
- openSUSE-SU-2011:1119vendor-advisory
- 41537third-party-advisory
- 46410third-party-advisory
- RHSA-2011:1327vendor-advisory
- RHSA-2011:1325vendor-advisory
- [oss-security] 20120822 CVE request: libqt4: two memory issuesmailing-list
- 46128third-party-advisory
- RHSA-2011:1324vendor-advisory
- [oss-security] 20120825 Re: CVE request: libqt4: two memory issuesmailing-list
- 49895third-party-advisory
- 46117third-party-advisory
- RHSA-2011:1326vendor-advisory
- 46119third-party-advisory
- 49723vdb-entry
- http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08
- RHSA-2011:1323vendor-advisory
- SUSE-SU-2011:1113vendor-advisory
- http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65
- RHSA-2011:1328vendor-advisory
- https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c
- 75652vdb-entry
- 46118third-party-advisory
- pango-harfbuzz-bo(69991)vdb-entry
- openSUSE-SU-2011:1120vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.