Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pango-develUpgrade pango | Dec 1, 2016 | May 11, 2009 |
| Debian | — | Upgrade pango1.0 | Jul 30, 2024 | May 11, 2009 |
| Freebsd | — | Upgrade linux-pangoUpgrade pangoUpgrade linux-f8-pangoUpgrade linux-f10-pango | Dec 10, 2025 | May 13, 2009 |
| Gentoo Linux | — | Upgrade x11-libs/pango. | Oct 30, 2017 | May 11, 2009 |
| Mfsa2009 36 | — | Upgrade to Mozilla Firefox version 3.0.12Upgrade to Mozilla Firefox version 3.5 | Jun 14, 2012 | May 11, 2009 |
| Oracle_linux | — | Upgrade pango-develUpgrade pango | Oct 16, 2024 | May 11, 2009 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade orbit2-32bitUpgrade pango-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade libidlUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190Upgrade pango-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-32bitUpgrade libidl-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner192Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner191-x86Upgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-translationsUpgrade gconf2-x86Upgrade mozilla-nss-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nssUpgrade pangoUpgrade MozillaFirefox-branding-SLEDUpgrade pango-docUpgrade mozilla-xulrunner192-x86Upgrade mozilla-nss-toolsUpgrade libfreebl3-x86Upgrade gconf2Upgrade gconf2-32bitUpgrade libidl-x86Upgrade mozilla-xulrunner190-translationsUpgrade orbit2-x86Upgrade mozilla-xulrunner191-32bitUpgrade orbit2Upgrade mozilla-xulrunner191 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpango1.0-0 | Nov 8, 2024 | May 11, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub