Pango Font Parsing - 'pangoft2-render.c' Heap Corruption
Author: Dan Rosenberg
type: remote
platform: linux
port:
date_added: 2011-01-18
date_updated: 2014-11-14
verified: 1
codes: CVE-2011-0020;OSVDB-70596
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/45842/info
Pango is prone to a remote heap-corruption vulnerability.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35232.zip