National Cyber Awareness System

Vulnerability Summary for CVE-2011-0064

Overview

The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.

Description

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://build.opensuse.org/request/show/63070

Type: Patch Information

Hyperlink:https://build.opensuse.org/request/show/63070

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=678563

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=678563

External Source: CONFIRM

Name: http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9

Type: Patch Information

Hyperlink:http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9

External Source: CONFIRM

Name: https://bugzilla.novell.com/show_bug.cgi?id=672502

Hyperlink:https://bugzilla.novell.com/show_bug.cgi?id=672502

External Source: CONFIRM

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=606997

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=606997

External Source: XF

Name: pango-hbbufferensure-bo(65770)

Hyperlink:http://xforce.iss.net/xforce/xfdb/65770

External Source: VUPEN

Name: ADV-2011-0683

Hyperlink:http://www.vupen.com/english/advisories/2011/0683

External Source: VUPEN

Name: ADV-2011-0584

Hyperlink:http://www.vupen.com/english/advisories/2011/0584

External Source: VUPEN

Name: ADV-2011-0558

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0558

External Source: VUPEN

Name: ADV-2011-0555

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0555

External Source: VUPEN

Name: ADV-2011-0543

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0543

External Source: UBUNTU

Name: USN-1082-1

Hyperlink:http://www.ubuntu.com/usn/USN-1082-1

External Source: BID

Name: 46632

Hyperlink:http://www.securityfocus.com/bid/46632

External Source: REDHAT

Name: RHSA-2011:0309

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0309.html

External Source: MANDRIVA

Name: MDVSA-2011:040

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:040

External Source: DEBIAN

Name: DSA-2178

Hyperlink:http://www.debian.org/security/2011/dsa-2178

External Source: SECTRACK

Name: 1025145

Hyperlink:http://securitytracker.com/id?1025145

External Source: SECUNIA

Name: 43800

Hyperlink:http://secunia.com/advisories/43800

External Source: SECUNIA

Name: 43578

Type: Advisory

Hyperlink:http://secunia.com/advisories/43578

External Source: SECUNIA

Name: 43572

Type: Advisory

Hyperlink:http://secunia.com/advisories/43572

External Source: SECUNIA

Name: 43559

Type: Advisory

Hyperlink:http://secunia.com/advisories/43559

External Source: FEDORA

Name: FEDORA-2011-3194

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.html