CVE Feed

    Dashboard / CVE / CVE-2010-0421

    CVE-2010-0421

    Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database.

    Published:Mar 15, 2010
    Last Modified:Apr 11, 2025
    EPS:Mar 18, 2010
    EPSS Score:0.01657
    CVSS Score:4.3

    Affected Products

    Vendor
    Gnome
    Product
    Pango
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    References

    http://ftp.gnome.org/pub/GNOME/sources/pango/1.27/pango-1.27.1.tar.bz2
    http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
    http://secunia.com/advisories/39041
    http://securitytracker.com/id?1023711
    http://www.debian.org/security/2010/dsa-2019
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:121
    http://www.redhat.com/support/errata/RHSA-2010-0140.html
    http://www.securityfocus.com/bid/38760
    http://www.vupen.com/english/advisories/2010/0627
    http://www.vupen.com/english/advisories/2010/0661
    http://www.vupen.com/english/advisories/2010/1552
    https://bugzilla.redhat.com/show_bug.cgi?id=555831
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9417
    http://ftp.gnome.org/pub/GNOME/sources/pango/1.27/pango-1.27.1.tar.bz2
    http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
    http://secunia.com/advisories/39041
    http://securitytracker.com/id?1023711
    http://www.debian.org/security/2010/dsa-2019
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:121
    http://www.redhat.com/support/errata/RHSA-2010-0140.html
    http://www.securityfocus.com/bid/38760
    http://www.vupen.com/english/advisories/2010/0627
    http://www.vupen.com/english/advisories/2010/0661
    http://www.vupen.com/english/advisories/2010/1552
    https://bugzilla.redhat.com/show_bug.cgi?id=555831
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9417

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High