CVE-2011-0064: gnome pango

EPSS trend

Probability

3.33%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.33% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

30 links

www.ubuntu.com/usn/USN-1082-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/43578Third Party AdvisoryX Refsource SECUNIAVendor Advisory
cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9X Refsource CONFIRMPatch
bugzilla.novell.com/show_bug.cgi?id=672502X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2011:040Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2011/0543VDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2011/0555VDB EntryX Refsource VUPENVendor Advisory
lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.htmlVendor AdvisoryX Refsource SUSE
bugzilla.redhat.com/show_bug.cgi?id=678563X Refsource CONFIRMPatchREPORT
www.vupen.com/english/advisories/2011/0558VDB EntryX Refsource VUPENVendor Advisory

Show all 30 references

secunia.com/advisories/43800Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/65770VDB EntryX Refsource XF
build.opensuse.org/request/show/63070X Refsource CONFIRMPatch
www.vupen.com/english/advisories/2011/0683VDB EntryX Refsource VUPEN
securitytracker.com/id?1025145VDB EntryX Refsource SECTRACK
bugzilla.mozilla.org/show_bug.cgi?id=606997X Refsource CONFIRM
lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/43559Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/43572Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2011/0584VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/46632VDB EntryX Refsource BID
www.redhat.com/support/errata/RHSA-2011-0309.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2011/dsa-2178Vendor AdvisoryX Refsource DEBIAN
access.redhat.com/errata/RHSA-2011:0309Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0309.jsonAdvisory
access.redhat.com/security/cve/CVE-2011-0064REPORT
www.cve.org/CVERecord?id=CVE-2011-0064Advisory
nvd.nist.gov/vuln/detail/CVE-2011-0064Advisory
security-tracker.debian.org/tracker/CVE-2011-0064Advisory

Related vulnerabilities

CVE-2018-15120alpinepango+711.50%8y ago24-08-2018 19:00libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.CVE-2011-0020debianpango1.0+818.94%15y ago24-01-2011 17:00Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.CVE-2011-3193canonicalubuntu_linux+167.25%14y ago16-06-2012 00:00Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.CVE-2010-0421debianpango1.0+72.45%16y ago18-03-2010 17:12Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database.CVE-2019-1010238alpinepango+216.27%7y ago19-07-2019 16:42Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.

All vulnerabilities inpango

CVE-2011-0064: gnome pango

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References