Home

CVE-2011-3193

Description

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
4.637

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2011:1324) Moderate: qt4 security update qt4-4.2.1-1.el5_7.1.i386.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-4.2.1-1.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-devel-4.2.1-1.el5_7.1.i386.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-devel-4.2.1-1.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-doc-4.2.1-1.el5_7.1.i386.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-doc-4.2.1-1.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-mysql-4.2.1-1.el5_7.1.i386.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-mysql-4.2.1-1.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-odbc-4.2.1-1.el5_7.1.i386.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-odbc-4.2.1-1.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-postgresql-4.2.1-1.el5_7.1.i386.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-postgresql-4.2.1-1.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-sqlite-4.2.1-1.el5_7.1.i386.rpmLinux
(RHSA-2011:1324) Moderate: qt4 security update qt4-sqlite-4.2.1-1.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1326) Moderate: pango security update pango-1.14.9-8.el5_7.3.i386.rpmLinux
(RHSA-2011:1326) Moderate: pango security update pango-1.14.9-8.el5_7.3.x86_64.rpmLinux
(RHSA-2011:1326) Moderate: pango security update pango-devel-1.14.9-8.el5_7.3.i386.rpmLinux
(RHSA-2011:1326) Moderate: pango security update pango-devel-1.14.9-8.el5_7.3.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234