Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2011-0020

EPSS 5.69% · P90
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-0020

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Gnome Pango 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gnome Pango是一款国际化文本布局和渲染库。 Pango 1.28.3版本及之前版本存在缓冲区错误漏洞。远程攻击者利用该漏洞导致系统拒绝服务(应用程序崩溃)或者可能执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-0020

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-0020

请登录查看更多情报信息。

Same Patch Batch · n/a · 2011-01-24 · 13 CVEs total

CVE-2010-4706Kernel Linux-PAM pam_xauth模块pam_xauth.c程序任意文件删除漏洞
CVE-2010-4707Kernel Linux-PAM pam_xauth模块pam_xauth.c文件拒绝服务漏洞
CVE-2010-4708Kernel Linux-PAM pam_env模块未明漏洞
CVE-2010-3316Kernel Linux-PAM pam_xauth模块pam_xauth.c文件程序读取任意文件漏洞
CVE-2010-3430Linux-pam 安全漏洞
CVE-2010-3431Linux-pam 安全漏洞
CVE-2010-3435Kernel Linux-PAM pam_env和pam_mail模块根权限提升漏洞
CVE-2010-3853Kernel Linux-PAM pam_namespace模块特权提升漏洞
CVE-2010-3927Lunascape非信任搜索路径漏洞
CVE-2011-0274HP Business Availability Center跨站脚本攻击漏洞
CVE-2011-0352Cisco Linksys WRT54GC Web管理界面缓冲区溢出漏洞
CVE-2011-0410CollabNet ScrumWorks Basic Server证书敏感信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-0020

No comments yet

Leave a comment