|
|
| |
|
| |
pango: denial of service
| Package(s): | pango |
CVE #(s): | CVE-2010-0421
|
| Created: | March 16, 2010 |
Updated: | March 2, 2011 |
| Description: |
From the Red Hat advisory:
An input sanitization flaw, leading to an array index error, was found in
the way the Pango font rendering library synthesized the Glyph Definition
(GDEF) table from a font's character map and the Unicode property database.
If an attacker created a specially-crafted font file and tricked a local,
unsuspecting user into loading the font file in an application that uses
the Pango font rendering library, it could cause that application to crash.
|
| Alerts: |
|
( Log in to post comments)
|
|
|