Red Hat Security AdvisoryRHSA-2011:1325
evolution28-pango security update
Released 2011-09-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 evolution28-pango-1.14.9-13.el4_11, evolution28-pango-1.14.9-13.el4_11.i386, evolution28-pango-1.14.9-13.el4_11.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 evolution28-pango-1.14.9-13.el4_11, evolution28-pango-1.14.9-13.el4_11.i386, evolution28-pango-devel-1.14.9-13.el4_11 +1
- Red Hat Enterprise Linux ES version 4 evolution28-pango-1.14.9-13.el4_11, evolution28-pango-1.14.9-13.el4_11.i386, evolution28-pango-1.14.9-13.el4_11.ia64 +3
- Red Hat Enterprise Linux WS version 4 evolution28-pango-1.14.9-13.el4_11, evolution28-pango-1.14.9-13.el4_11.i386, evolution28-pango-1.14.9-13.el4_11.ia64 +3
Fixes 1 record
Priority MEDIUM 50
Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly exec…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07171 · Published 2012-06-16 · Fixed CWE-787
