CVE-2011-3193
Fixed in a distro release EPSS 7%
Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Products: gnome pango, qt, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_workstation, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pango1.0 | 1.28.3-1 |
| Debian 13 | pango1.0 | 1.28.3-1 |
| Debian 14 | pango1.0 | 1.28.3-1 |
| Debian 6.0 | qt4-x11 | 4:4.6.3-4+squeeze2 |
| Red Hat Enterprise Linux 4 | evolution28-pango | 0:1.14.9-13.el4_11 |
| Red Hat Enterprise Linux 4 | evolution28-pango-debuginfo | 0:1.14.9-13.el4_11 |
| Red Hat Enterprise Linux 4 | evolution28-pango-devel | 0:1.14.9-13.el4_11 |
| Red Hat Enterprise Linux 4 | frysk | 0:0.0.1.2007.08.03-8.el4 |
| Red Hat Enterprise Linux 4 | frysk-debuginfo | 0:0.0.1.2007.08.03-8.el4 |
| Red Hat Enterprise Linux 5 | pango | 0:1.14.9-8.el5_7.3 |
| Red Hat Enterprise Linux 5 | pango-debuginfo | 0:1.14.9-8.el5_7.3 |
| Red Hat Enterprise Linux 5 | pango-devel | 0:1.14.9-8.el5_7.3 |
| Red Hat Enterprise Linux 5 | qt4 | 0:4.2.1-1.el5_7.1 |
| Red Hat Enterprise Linux 5 | qt4-debuginfo | 0:4.2.1-1.el5_7.1 |
| Red Hat Enterprise Linux 5 | qt4-devel | 0:4.2.1-1.el5_7.1 |
| Red Hat Enterprise Linux 5 | qt4-doc | 0:4.2.1-1.el5_7.1 |
| Red Hat Enterprise Linux 5 | qt4-mysql | 0:4.2.1-1.el5_7.1 |
| Red Hat Enterprise Linux 5 | qt4-odbc | 0:4.2.1-1.el5_7.1 |
| Red Hat Enterprise Linux 5 | qt4-postgresql | 0:4.2.1-1.el5_7.1 |
| Red Hat Enterprise Linux 5 | qt4-sqlite | 0:4.2.1-1.el5_7.1 |
| Red Hat Enterprise Linux 6 | phonon-backend-gstreamer | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | phonon-backend-gstreamer | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-debuginfo | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-debuginfo | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-demos | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-demos | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-devel | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-devel | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-doc | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-doc | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-examples | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-examples | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-mysql | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-mysql | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-odbc | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-odbc | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-postgresql | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-postgresql | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-sqlite | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-sqlite | 1:4.6.2-20.el6 |
| Red Hat Enterprise Linux 6 | qt-x11 | 1:4.6.2-17.el6_1.1 |
| Red Hat Enterprise Linux 6 | qt-x11 | 1:4.6.2-20.el6 |