Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2010-0421
HistoryMar 18, 2010 - 5:30 p.m.

CVE-2010-0421

2010-03-1817:30:00
CWE-119
redhat
web.nvd.nist.gov
58
cve
2010-0421
pango
denial of service
font file
vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6

Confidence

Low

EPSS

0.003

Percentile

65.1%

JSON

Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font’s charmap and the Unicode property database.

Affected configurations

Nvd
Node
gnomepangoRange≤1.27
VendorProductVersionCPE
gnomepango*cpe:2.3:a:gnome:pango:*:*:*:*:*:*:*:*

Related

nessus 10
openvas 14
veracode 1
cvelist 1
debiancve 1
prion 1
debian 2
ubuntucve 1
osv 1
oraclelinux 1
redhat 1
centos 1
securityvulns 2
nvd 1
ubuntu 1
nessus
nessus
SuSE 10 Security Update : pango (ZYPP Patch Number 6895)
2010-10-11 00:00:00
Mandriva Linux Security Advisory : pango (MDVSA-2010:121)
2010-06-23 00:00:00
Debian DSA-2019-1 : pango1.0 - missing input sanitization
2010-03-22 00:00:00
openvas
openvas
Mandriva Update for pango MDVSA-2010:121 (pango)
2010-06-25 00:00:00
CentOS Update for pango CESA-2010:0140 centos3 i386
2010-03-22 00:00:00
CentOS Update for pango CESA-2010:0140 centos5 i386
2011-08-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:40:49
cvelist
cvelist
CVE-2010-0421
2010-03-18 17:12:00
debiancve
debiancve
CVE-2010-0421
2010-03-18 17:30:00
prion
prion
Design/Logic Flaw
2010-03-18 17:30:00
debian
debian
[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service
2010-03-20 09:41:28
[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service
2010-03-20 09:41:28
ubuntucve
ubuntucve
CVE-2010-0421
2010-03-18 00:00:00
osv
osv
pango1.0 - denial of service
2010-03-20 00:00:00
oraclelinux
oraclelinux
pango security update
2010-03-15 00:00:00
redhat
redhat
(RHSA-2010:0140) Moderate: pango security update
2010-03-15 00:00:00
centos
centos
evolution28, pango security update
2010-03-16 13:01:20
securityvulns
securityvulns
Pango library array index overflow
2010-03-23 00:00:00
[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service
2010-03-23 00:00:00
nvd
nvd
CVE-2010-0421
2010-03-18 17:30:00
ubuntu
ubuntu
Pango vulnerabilities
2011-03-02 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6

Confidence

Low

EPSS

0.003

Percentile

65.1%

JSON
Related for CVE-2010-0421
nessus10openvas14veracode1cvelist1debiancve1prion1debian2ubuntucve1osv1oraclelinux1redhat1centos1securityvulns2nvd1ubuntu1