CVE-2011-0020
Pango < 1.28.3 - Heap-Based Buffer Overflow via Crafted Font File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-0020. PoCs published by Dan Rosenberg.
AI-analyzed exploit summary The provided text describes a remote heap-corruption vulnerability in Pango (CVE-2011-0020) that could lead to arbitrary code execution or denial-of-service. However, no actual exploit code is included; only a reference to a binary exploit hosted on GitLab.
Description
Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.
Exploits (1)
The provided text describes a remote heap-corruption vulnerability in Pango (CVE-2011-0020) that could lead to arbitrary code execution or denial-of-service. However, no actual exploit code is included; only a reference to a binary exploit hosted on GitLab.