National Cyber Awareness System

Vulnerability Summary for CVE-2011-3193

Overview

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65

Type: Patch Information

Hyperlink:http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65

External Source: CONFIRM

Name: https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c

Hyperlink:https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c

External Source: SUSE

Name: SUSE-SU-2011:1113

Hyperlink:https://hermes.opensuse.org/messages/12056605

External Source: XF

Name: pango-harfbuzz-bo(69991)

Hyperlink:http://xforce.iss.net/xforce/xfdb/69991

External Source: UBUNTU

Name: USN-1504-1

Hyperlink:http://www.ubuntu.com/usn/USN-1504-1

External Source: BID

Name: 49723

Hyperlink:http://www.securityfocus.com/bid/49723

External Source: OSVDB

Name: 75652

Hyperlink:http://www.osvdb.org/75652

External Source: MLIST

Name: [oss-security] 20120825 Re: CVE request: libqt4: two memory issues

Hyperlink:http://www.openwall.com/lists/oss-security/2011/08/25/1

External Source: MLIST

Name: [oss-security] 20120824 Re: CVE request: libqt4: two memory issues

Hyperlink:http://www.openwall.com/lists/oss-security/2011/08/24/8

External Source: MLIST

Name: [oss-security] 20120822 CVE request: libqt4: two memory issues

Hyperlink:http://www.openwall.com/lists/oss-security/2011/08/22/6

External Source: SECUNIA

Name: 49895

Type: Advisory

Hyperlink:http://secunia.com/advisories/49895

External Source: SECUNIA

Name: 46410

Type: Advisory

Hyperlink:http://secunia.com/advisories/46410

External Source: SECUNIA

Name: 46371

Type: Advisory

Hyperlink:http://secunia.com/advisories/46371

External Source: SECUNIA

Name: 46128

Type: Advisory

Hyperlink:http://secunia.com/advisories/46128

External Source: SECUNIA

Name: 46119

Type: Advisory

Hyperlink:http://secunia.com/advisories/46119

External Source: SECUNIA

Name: 46118

Type: Advisory

Hyperlink:http://secunia.com/advisories/46118

External Source: SECUNIA

Name: 46117

Type: Advisory

Hyperlink:http://secunia.com/advisories/46117

External Source: SECUNIA

Name: 41537

Type: Advisory

Hyperlink:http://secunia.com/advisories/41537

External Source: REDHAT

Name: RHSA-2011:1328

Hyperlink:http://rhn.redhat.com/errata/RHSA-2011-1328.html

External Source: REDHAT

Name: RHSA-2011:1327

Hyperlink:http://rhn.redhat.com/errata/RHSA-2011-1327.html

External Source: REDHAT

Name: RHSA-2011:1326

Hyperlink:http://rhn.redhat.com/errata/RHSA-2011-1326.html

External Source: REDHAT

Name: RHSA-2011:1325

Hyperlink:http://rhn.redhat.com/errata/RHSA-2011-1325.html

External Source: REDHAT

Name: RHSA-2011:1324

Hyperlink:http://rhn.redhat.com/errata/RHSA-2011-1324.html

External Source: REDHAT

Name: RHSA-2011:1323

Hyperlink:http://rhn.redhat.com/errata/RHSA-2011-1323.html

External Source: SUSE

Name: openSUSE-SU-2011:1120

Hyperlink:http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html

External Source: SUSE

Name: openSUSE-SU-2011:1119

Hyperlink:http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html

External Source: MISC

Name: http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0

Hyperlink:http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0

External Source: MISC

Name: http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08

Hyperlink:http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08