Vulnerability-Lookup

CVE-2011-0020 (GCVE-0-2011-0020)

Vulnerability from cvelistv5 – Published: 2011-01-24 17:00 – Updated: 2024-08-06 21:43

Summary

Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root Scorecard

References

15 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=671122	x_refsource_CONFIRM
https://bugzilla.gnome.org/show_bug.cgi?id=639882	x_refsource_MISC
https://bugs.launchpad.net/ubuntu/+source/pango1.…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1024994	vdb-entryx_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://openwall.com/lists/oss-security/2011/01/18/6	mailing-listx_refsource_MLIST
http://osvdb.org/70596	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/43100	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-01…	vendor-advisoryx_refsource_REDHAT
http://openwall.com/lists/oss-security/2011/01/20/2	mailing-listx_refsource_MLIST
http://www.vupen.com/english/advisories/2011/0186	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/42934	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/45842	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2011/0238	vdb-entryx_refsource_VUPEN

Date Public

2011-01-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:43:14.022Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
          },
          {
            "name": "1024994",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024994"
          },
          {
            "name": "pango-pango-bo(64832)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
          },
          {
            "name": "SUSE-SR:2011:005",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
          },
          {
            "name": "[oss-security] 20110118 CVE request: heap corruption in libpango",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
          },
          {
            "name": "70596",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/70596"
          },
          {
            "name": "43100",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43100"
          },
          {
            "name": "RHSA-2011:0180",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
          },
          {
            "name": "[oss-security] 20110120 Re: CVE request: heap corruption in libpango",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
          },
          {
            "name": "ADV-2011-0186",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0186"
          },
          {
            "name": "42934",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42934"
          },
          {
            "name": "45842",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/45842"
          },
          {
            "name": "ADV-2011-0238",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0238"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-01-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
        },
        {
          "name": "1024994",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024994"
        },
        {
          "name": "pango-pango-bo(64832)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
        },
        {
          "name": "SUSE-SR:2011:005",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
        },
        {
          "name": "[oss-security] 20110118 CVE request: heap corruption in libpango",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
        },
        {
          "name": "70596",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/70596"
        },
        {
          "name": "43100",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43100"
        },
        {
          "name": "RHSA-2011:0180",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
        },
        {
          "name": "[oss-security] 20110120 Re: CVE request: heap corruption in libpango",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
        },
        {
          "name": "ADV-2011-0186",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0186"
        },
        {
          "name": "42934",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42934"
        },
        {
          "name": "45842",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/45842"
        },
        {
          "name": "ADV-2011-0238",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0238"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-0020",
    "datePublished": "2011-01-24T17:00:00.000Z",
    "dateReserved": "2010-12-07T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:43:14.022Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2011-0020",
      "date": "2026-10-03",
      "epss": "0.18944",
      "percentile": "0.97225"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "secalert@redhat.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:gnome:pango:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7D5CB3EC-2F19-49E8-AE95-7713A2883000",
                    "versionEndIncluding": "1.28.3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnome:pango:1.28.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8E87EC3B-BA4D-4789-A587-6F4E7BE493A5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnome:pango:1.28.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1745E40F-5D42-4143-87BD-DA0D8589F738",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnome:pango:1.28.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3EC5A534-F110-437F-B792-013A9EBDD933",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:0.20:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DBBA8956-A704-4592-959E-A9EC812205E5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:0.21:*:*:*:*:*:*:*",
                    "matchCriteriaId": "010F3DBB-624C-46F2-A1EF-FEC38944B143",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:0.22:*:*:*:*:*:*:*",
                    "matchCriteriaId": "84FE18B2-D113-4396-A51E-8F32C776A0F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:0.23:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E2D9AD36-F6E5-4FC9-816A-A69AE8CA1228",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:0.24:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0C00024B-7A93-4F30-B115-7FC32DFAA6A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:0.25:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ABDBC115-DE56-4753-B61A-281F01906675",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:0.26:*:*:*:*:*:*:*",
                    "matchCriteriaId": "598C787A-1045-498A-B1C2-CAD997C5350B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3E5DC6F0-EB66-4FE8-B3B2-D68E6EB55BD9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7B6FF791-AC23-4634-AD58-96653245DFAD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0A419445-E8C0-4BC1-A592-9B63FCC8354C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "60158B24-22F9-47AC-BEBA-119E61B95858",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "31EA2429-07F7-4569-9D4D-0397BD2708BC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "603025DC-12F8-41BE-814F-515264503123",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4F64E49C-25CF-4C59-AD1A-AA804AA1D746",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0DA8CFE0-C9CD-4DEF-B814-380DE5AFDC91",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F5C554F1-F4B7-47C3-B6E0-8822B205B79B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1A98F2C0-72DC-415C-A809-48855DFC70F5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AE0ECCE2-76E8-4A4B-A6CA-EEC45E3D7403",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FF9C559F-D696-4E09-8D5D-3AC39FB238EA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C6322FCB-DC34-4C4B-A8AE-9983927F6B25",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CA3EBEF3-96D3-4DBC-90CF-9AB748CDBB22",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.14:*:*:*:*:*:*:*",
                    "matchCriteriaId": "85CB58A0-A452-40EE-818F-A56723BBBF43",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.15:*:*:*:*:*:*:*",
                    "matchCriteriaId": "94ED4EC6-F6FC-45F6-9B66-796081CC4E01",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "30BA57EA-8702-4247-8A75-DB5D2AD18F4C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.17:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EC0D745D-6B90-4A11-A51D-34CEE91BA4F1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.18:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4F73FC80-FB3C-4AEA-BB27-961CD378B1B0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.19:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D336C05B-D7AF-4B73-82D2-47766992F6CB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.20:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B78E87B1-4879-42AE-9B98-9AA176C8ECC7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.21:*:*:*:*:*:*:*",
                    "matchCriteriaId": "992D4C59-7A6E-4029-8F1C-54F8F659248D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.22:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E2D921A6-7523-4856-86A4-00EE58BE8F88",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.23:*:*:*:*:*:*:*",
                    "matchCriteriaId": "20D9B608-11DF-4F1A-B41B-80C668397F94",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.24:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2F3E139E-19F6-4E67-9D3A-0D8CF5C6581D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.25:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FABB9D9A-421F-4BC5-BCF4-A385BCCE4E68",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.26:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ABC7A055-41A2-479E-8D6D-8D2E841ED426",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pango:pango:1.27:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CECD345E-EA17-4D8A-A7E9-1E8041D43A94",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object."
          },
          {
            "lang": "es",
            "value": "Desbordamiento de b\u00fafer basado en memoria din\u00e1mica  en la funci\u00f3n pango_ft2_font_render_box_glyph en pango/pangoft2-render.c de libpango en Pango v1.28.3 y anteriores ,cuando el Backend FreeType2 est\u00e1 activo permite a atacantes remotos causar una denegaci\u00f3n de servicio (cuelgue) o ejecutar c\u00f3digo arbitrario a trav\u00e9s de una a trav\u00e9s de un archivo de fuentes manipulado, relacionado con una estuctura Glyph para un objeto de FT_Bitmap."
          }
        ],
        "id": "CVE-2011-0020",
        "lastModified": "2026-06-16T23:26:38.197",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "HIGH",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.6,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 4.9,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2011-01-24T18:00:03.783",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Exploit"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Exploit"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://osvdb.org/70596"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/42934"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/43100"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/45842"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securitytracker.com/id?1024994"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0186"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vupen.com/english/advisories/2011/0238"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Exploit"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Exploit"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/70596"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/42934"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/43100"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/45842"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1024994"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0186"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2011/0238"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-01-13T21:01:39+00:00",
      "cve": "CVE-2011-0020",
      "id": "CVE-2011-0020",
      "initial_release_date": "2011-01-18T00:00:00+00:00",
      "product_status:fixed": "212",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-0020.json",
      "version": "3"
    }
  }
}

CERTA-2011-AVI-129

Vulnerability from certfr_avis - Published: 2011-03-03 - Updated: 2011-03-03

Deux vulnérabilités ont été corrigées dans la bibliothèque libpango. Elles peuvent être exploitées pour réaliser un déni de service à distance, et dans certains cas exécuter du code à distance.

Description

Deux vulnérabilités affectent libpango. La première (CVE-2011-0020) permet à un attaquant de réaliser un déni de service en provoquant l'arrêt brutal d'une application utilisant cette bibliothèque à l'aide d'un fichier de police de caractères spécialement conçu. Le débordement de tampon sur le tas est à l'origine de l'arrêt, et pourrait être exploité pour exécuter du code à distance. La seconde (CVE-2011-0064) permet à une personne malveillante de provoquer l'arrêt brutal d'une application via un déréférencement de pointeur NULL, en lui passant des paramètres spécialement conçus. L'exécution de code arbitraire à distance est également possible.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Libpango versions 1.28.3 et précédentes.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

EUVD-2026-113713

European Vulnerability Database identifier assigned by ENISA

Reserved

2026-10-02 06:30

Assigner

ENISA

Alias of

a CVE record, shown under related vulnerabilities. This identifier carries no description, severity or references of its own: they belong to that CVE.

JSON

To clipboard

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T06:30:55.168453+00:00",
  "id": "EUVD-2026-113713"
}

FKIE_CVE-2011-0020

Vulnerability from fkie_nvd - Published: 2011-01-24 18:00 - Updated: 2026-06-16 23:26

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
secalert@redhat.com	http://openwall.com/lists/oss-security/2011/01/18/6	Exploit
secalert@redhat.com	http://openwall.com/lists/oss-security/2011/01/20/2	Exploit
secalert@redhat.com	http://osvdb.org/70596
secalert@redhat.com	http://secunia.com/advisories/42934
secalert@redhat.com	http://secunia.com/advisories/43100
secalert@redhat.com	http://www.redhat.com/support/errata/RHSA-2011-0180.html
secalert@redhat.com	http://www.securityfocus.com/bid/45842
secalert@redhat.com	http://www.securitytracker.com/id?1024994
secalert@redhat.com	http://www.vupen.com/english/advisories/2011/0186	Vendor Advisory
secalert@redhat.com	http://www.vupen.com/english/advisories/2011/0238
secalert@redhat.com	https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616	Exploit
secalert@redhat.com	https://bugzilla.gnome.org/show_bug.cgi?id=639882
secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=671122	Exploit
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/64832
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
af854a3a-2127-422b-91ae-364da2661108	http://openwall.com/lists/oss-security/2011/01/18/6	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://openwall.com/lists/oss-security/2011/01/20/2	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/70596
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/42934
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/43100
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2011-0180.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/45842
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1024994
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2011/0186	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2011/0238
af854a3a-2127-422b-91ae-364da2661108	https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616	Exploit
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.gnome.org/show_bug.cgi?id=639882
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=671122	Exploit
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/64832

Impacted products

Vendor	Product	Version
gnome	pango	*
gnome	pango	1.28.0
gnome	pango	1.28.1
gnome	pango	1.28.2
pango	pango	0.20
pango	pango	0.21
pango	pango	0.22
pango	pango	0.23
pango	pango	0.24
pango	pango	0.25
pango	pango	0.26
pango	pango	1.0
pango	pango	1.1
pango	pango	1.2
pango	pango	1.3
pango	pango	1.4
pango	pango	1.5
pango	pango	1.6
pango	pango	1.7
pango	pango	1.8
pango	pango	1.9
pango	pango	1.10
pango	pango	1.11
pango	pango	1.12
pango	pango	1.13
pango	pango	1.14
pango	pango	1.15
pango	pango	1.16
pango	pango	1.17
pango	pango	1.18
pango	pango	1.19
pango	pango	1.20
pango	pango	1.21
pango	pango	1.22
pango	pango	1.23
pango	pango	1.24
pango	pango	1.25
pango	pango	1.26
pango	pango	1.27

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnome:pango:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D5CB3EC-2F19-49E8-AE95-7713A2883000",
              "versionEndIncluding": "1.28.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnome:pango:1.28.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E87EC3B-BA4D-4789-A587-6F4E7BE493A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnome:pango:1.28.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1745E40F-5D42-4143-87BD-DA0D8589F738",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnome:pango:1.28.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "3EC5A534-F110-437F-B792-013A9EBDD933",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:0.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "DBBA8956-A704-4592-959E-A9EC812205E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:0.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "010F3DBB-624C-46F2-A1EF-FEC38944B143",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "84FE18B2-D113-4396-A51E-8F32C776A0F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:0.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2D9AD36-F6E5-4FC9-816A-A69AE8CA1228",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C00024B-7A93-4F30-B115-7FC32DFAA6A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:0.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABDBC115-DE56-4753-B61A-281F01906675",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:0.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "598C787A-1045-498A-B1C2-CAD997C5350B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E5DC6F0-EB66-4FE8-B3B2-D68E6EB55BD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B6FF791-AC23-4634-AD58-96653245DFAD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A419445-E8C0-4BC1-A592-9B63FCC8354C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "60158B24-22F9-47AC-BEBA-119E61B95858",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "31EA2429-07F7-4569-9D4D-0397BD2708BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "603025DC-12F8-41BE-814F-515264503123",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F64E49C-25CF-4C59-AD1A-AA804AA1D746",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DA8CFE0-C9CD-4DEF-B814-380DE5AFDC91",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5C554F1-F4B7-47C3-B6E0-8822B205B79B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A98F2C0-72DC-415C-A809-48855DFC70F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE0ECCE2-76E8-4A4B-A6CA-EEC45E3D7403",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF9C559F-D696-4E09-8D5D-3AC39FB238EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6322FCB-DC34-4C4B-A8AE-9983927F6B25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA3EBEF3-96D3-4DBC-90CF-9AB748CDBB22",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "85CB58A0-A452-40EE-818F-A56723BBBF43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "94ED4EC6-F6FC-45F6-9B66-796081CC4E01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "30BA57EA-8702-4247-8A75-DB5D2AD18F4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC0D745D-6B90-4A11-A51D-34CEE91BA4F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F73FC80-FB3C-4AEA-BB27-961CD378B1B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "D336C05B-D7AF-4B73-82D2-47766992F6CB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "B78E87B1-4879-42AE-9B98-9AA176C8ECC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "992D4C59-7A6E-4029-8F1C-54F8F659248D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2D921A6-7523-4856-86A4-00EE58BE8F88",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "20D9B608-11DF-4F1A-B41B-80C668397F94",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F3E139E-19F6-4E67-9D3A-0D8CF5C6581D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "FABB9D9A-421F-4BC5-BCF4-A385BCCE4E68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABC7A055-41A2-479E-8D6D-8D2E841ED426",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pango:pango:1.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "CECD345E-EA17-4D8A-A7E9-1E8041D43A94",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en memoria din\u00e1mica  en la funci\u00f3n pango_ft2_font_render_box_glyph en pango/pangoft2-render.c de libpango en Pango v1.28.3 y anteriores ,cuando el Backend FreeType2 est\u00e1 activo permite a atacantes remotos causar una denegaci\u00f3n de servicio (cuelgue) o ejecutar c\u00f3digo arbitrario a trav\u00e9s de una a trav\u00e9s de un archivo de fuentes manipulado, relacionado con una estuctura Glyph para un objeto de FT_Bitmap."
    }
  ],
  "id": "CVE-2011-0020",
  "lastModified": "2026-06-16T23:26:38.197",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.6,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-01-24T18:00:03.783",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://osvdb.org/70596"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/42934"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/43100"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/45842"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securitytracker.com/id?1024994"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0186"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2011/0238"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/70596"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/42934"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/43100"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/45842"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1024994"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0186"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2011/0238"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-5C8W-JG4W-GCJ2

Vulnerability from github – Published: 2022-05-03 03:25 – Updated: 2022-05-03 03:25

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2011-0020"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2011-01-24T18:00:00Z",
    "severity": "HIGH"
  },
  "details": "Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.",
  "id": "GHSA-5c8w-jg4w-gcj2",
  "modified": "2022-05-03T03:25:13Z",
  "published": "2022-05-03T03:25:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0020"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2011:0180"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2011-0020"
    },
    {
      "type": "WEB",
      "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
    },
    {
      "type": "WEB",
      "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
    },
    {
      "type": "WEB",
      "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/70596"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/42934"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/43100"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/45842"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1024994"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2011/0186"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2011/0238"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2011-0020

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2011-0020

Aliases

CVE-2011-0020

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2011-0020",
    "description": "Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.",
    "id": "GSD-2011-0020",
    "references": [
      "https://www.suse.com/security/cve/CVE-2011-0020.html",
      "https://access.redhat.com/errata/RHSA-2011:0180",
      "https://linux.oracle.com/cve/CVE-2011-0020.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2011-0020"
      ],
      "details": "Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.",
      "id": "GSD-2011-0020",
      "modified": "2023-12-13T01:19:04.864834Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2011-0020",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
          },
          {
            "name": "http://openwall.com/lists/oss-security/2011/01/18/6",
            "refsource": "MISC",
            "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
          },
          {
            "name": "http://openwall.com/lists/oss-security/2011/01/20/2",
            "refsource": "MISC",
            "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
          },
          {
            "name": "http://osvdb.org/70596",
            "refsource": "MISC",
            "url": "http://osvdb.org/70596"
          },
          {
            "name": "http://secunia.com/advisories/42934",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/42934"
          },
          {
            "name": "http://secunia.com/advisories/43100",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/43100"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0180.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
          },
          {
            "name": "http://www.securityfocus.com/bid/45842",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/45842"
          },
          {
            "name": "http://www.securitytracker.com/id?1024994",
            "refsource": "MISC",
            "url": "http://www.securitytracker.com/id?1024994"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2011/0186",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2011/0186"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2011/0238",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2011/0238"
          },
          {
            "name": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616",
            "refsource": "MISC",
            "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
          },
          {
            "name": "https://bugzilla.gnome.org/show_bug.cgi?id=639882",
            "refsource": "MISC",
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=671122",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.17:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:0.23:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:0.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.14:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.27:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.26:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.16:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:0.24:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:0.25:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.24:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.19:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.15:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.25:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.18:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:0.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:0.26:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:0.20:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.13:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.23:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pango:pango:1.20:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnome:pango:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.28.3",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnome:pango:1.28.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnome:pango:1.28.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnome:pango:1.28.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-0020"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2011-0186",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0186"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=671122",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=671122"
            },
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit"
              ],
              "url": "https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616"
            },
            {
              "name": "[oss-security] 20110118 CVE request: heap corruption in libpango",
              "refsource": "MLIST",
              "tags": [
                "Exploit"
              ],
              "url": "http://openwall.com/lists/oss-security/2011/01/18/6"
            },
            {
              "name": "[oss-security] 20110120 Re: CVE request: heap corruption in libpango",
              "refsource": "MLIST",
              "tags": [
                "Exploit"
              ],
              "url": "http://openwall.com/lists/oss-security/2011/01/20/2"
            },
            {
              "name": "45842",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/45842"
            },
            {
              "name": "70596",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/70596"
            },
            {
              "name": "RHSA-2011:0180",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0180.html"
            },
            {
              "name": "1024994",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1024994"
            },
            {
              "name": "43100",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/43100"
            },
            {
              "name": "ADV-2011-0238",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2011/0238"
            },
            {
              "name": "42934",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/42934"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=639882",
              "refsource": "MISC",
              "tags": [],
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=639882"
            },
            {
              "name": "SUSE-SR:2011:005",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
            },
            {
              "name": "pango-pango-bo(64832)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64832"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.6,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 4.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-02-13T03:22Z",
      "publishedDate": "2011-01-24T18:00Z"
    }
  }
}

OPENSUSE-SU-2024:10578-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:01

Summary

libpango-1_0-0-1.40.3-1.1 on GA media

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2011-0020.

CVE-2011-0020

Recommended: 24 products

Open the full advisory

RHSA-2011:0180

Vulnerability from csaf_redhat - Published: 2011-01-27 18:32 - Updated: 2026-06-25 10:37

Summary

Red Hat Security Advisory: pango security update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2011-0020.

CVE-2011-0020

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

Fixed: 114 products

https://access.redhat.com/errata/RHSA-2011:0180

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2011-0020 (GCVE-0-2011-0020)

CERTA-2011-AVI-129

Description

Solution

EUVD-2026-113713

FKIE_CVE-2011-0020

GHSA-5C8W-JG4W-GCJ2

GSD-2011-0020

OPENSUSE-SU-2024:10578-1

RHSA-2011:0180

Tags

Sightings

Nomenclature

Related by attack behaviour