CVE-2010-0421
Fixed in a distro release EPSS 2%
Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database.
Products: gnome pango
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pango1.0 | 1.26.2-1 |
| Debian 13 | pango1.0 | 1.26.2-1 |
| Debian 14 | pango1.0 | 1.26.2-1 |
| Debian 5.0 | pango1.0 | 1.20.5-5+lenny1 |
| Red Hat Enterprise Linux 3 | pango | 0:1.2.5-10 |
| Red Hat Enterprise Linux 3 | pango-debuginfo | 0:1.2.5-10 |
| Red Hat Enterprise Linux 3 | pango-devel | 0:1.2.5-10 |
| Red Hat Enterprise Linux 4 | evolution28-pango | 0:1.14.9-13.el4_8 |
| Red Hat Enterprise Linux 4 | evolution28-pango-debuginfo | 0:1.14.9-13.el4_8 |
| Red Hat Enterprise Linux 4 | evolution28-pango-devel | 0:1.14.9-13.el4_8 |
| Red Hat Enterprise Linux 4 | pango | 0:1.6.0-16.el4_8 |
| Red Hat Enterprise Linux 4 | pango-debuginfo | 0:1.6.0-16.el4_8 |
| Red Hat Enterprise Linux 4 | pango-devel | 0:1.6.0-16.el4_8 |
| Red Hat Enterprise Linux 5 | pango | 0:1.14.9-8.el5 |
| Red Hat Enterprise Linux 5 | pango-debuginfo | 0:1.14.9-8.el5 |
| Red Hat Enterprise Linux 5 | pango-devel | 0:1.14.9-8.el5 |