| Package | Affected versions | Patched versions |
|---|---|---|
| pango | = 1.10= 1.12= 1.14= 1.16= 1.18= 1.2= 1.20= 1.4= 1.6= 1.8≤ 1.22 |
Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free