NVD Vulnerability Detail

CVE-2011-0064

Summary	The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.
Publication Date	March 8, 2011, 6 a.m.
Registration Date	Jan. 28, 2021, 4:37 p.m.
Last Update	Nov. 21, 2024, 10:23 a.m.

CVSS2.0 : MEDIUM
Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	はい

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:mozilla:firefox::::::::
cpe:2.3:a:gnome:pango:1.28.3:::::::*

Related information, measures and tools

No	URL	タグ
1	http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9	Patch
2	http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.html
3	http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
4	http://secunia.com/advisories/43559	Vendor Advisory
5	http://secunia.com/advisories/43572	Vendor Advisory
6	http://secunia.com/advisories/43578	Vendor Advisory
7	http://secunia.com/advisories/43800
8	http://securitytracker.com/id?1025145
9	http://www.debian.org/security/2011/dsa-2178
10	http://www.mandriva.com/security/advisories?name=MDVSA-2011:040
11	http://www.redhat.com/support/errata/RHSA-2011-0309.html
12	http://www.securityfocus.com/bid/46632
13	http://www.ubuntu.com/usn/USN-1082-1
14	http://www.vupen.com/english/advisories/2011/0543	Vendor Advisory
15	http://www.vupen.com/english/advisories/2011/0555	Vendor Advisory
16	http://www.vupen.com/english/advisories/2011/0558	Vendor Advisory
17	http://www.vupen.com/english/advisories/2011/0584
18	http://www.vupen.com/english/advisories/2011/0683
19	https://bugzilla.mozilla.org/show_bug.cgi?id=606997
20	https://bugzilla.novell.com/show_bug.cgi?id=672502
21	https://bugzilla.redhat.com/show_bug.cgi?id=678563	Patch
22	https://build.opensuse.org/request/show/63070	Patch
23	https://exchange.xforce.ibmcloud.com/vulnerabilities/65770
24	http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9	Patch
25	https://exchange.xforce.ibmcloud.com/vulnerabilities/65770
26	https://build.opensuse.org/request/show/63070	Patch
27	https://bugzilla.redhat.com/show_bug.cgi?id=678563	Patch
28	https://bugzilla.novell.com/show_bug.cgi?id=672502
29	https://bugzilla.mozilla.org/show_bug.cgi?id=606997
30	http://www.vupen.com/english/advisories/2011/0683
31	http://www.vupen.com/english/advisories/2011/0584
32	http://www.vupen.com/english/advisories/2011/0558	Vendor Advisory
33	http://www.vupen.com/english/advisories/2011/0555	Vendor Advisory
34	http://www.vupen.com/english/advisories/2011/0543	Vendor Advisory
35	http://www.ubuntu.com/usn/USN-1082-1
36	http://www.securityfocus.com/bid/46632
37	http://www.redhat.com/support/errata/RHSA-2011-0309.html
38	http://www.mandriva.com/security/advisories?name=MDVSA-2011:040
39	http://www.debian.org/security/2011/dsa-2178
40	http://securitytracker.com/id?1025145
41	http://secunia.com/advisories/43800
42	http://secunia.com/advisories/43578	Vendor Advisory
43	http://secunia.com/advisories/43572	Vendor Advisory
44	http://secunia.com/advisories/43559	Vendor Advisory
45	http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
46	http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.html

Common Vulnerabilities List

JVN Vulnerability Information

HarfBuzz の hb-buffer.c 内にある hb_buffer_ensure 関数における任意のコードを実行される脆弱性

Title	HarfBuzz の hb-buffer.c 内にある hb_buffer_ensure 関数における任意のコードを実行される脆弱性
Summary	HarfBuzz の hb-buffer.c 内にある hb_buffer_ensure 関数は、メモリ再割り当ての成功を検証しないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。
Possible impacts	第三者により、不正なインデックスの使用を誘発する巧妙に細工された OpenType フォントデータを介して、サービス運用妨害 (DoS) 状態にされる、または任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 1, 2011, midnight
Registration Date	March 28, 2011, 4:08 p.m.
Last Update	Sept. 14, 2011, 10:45 a.m.

Affected System

レッドハット

Red Hat Enterprise Linux Desktop 6

Red Hat Enterprise Linux HPC Node 6

Red Hat Enterprise Linux Server 6

Red Hat Enterprise Linux Workstation 6

オラクル

Oracle Solaris 11 Express

Pango.org

Pango 1.28.3

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-0064	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0064
National Vulnerability Database (NVD)
2	CVE-2011-0064	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0064

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Pango
1	Top Page	http://www.pango.org
Red Hat Security Advisory
2	RHSA-2011:0309	https://rhn.redhat.com/errata/RHSA-2011-0309.html
SECURITY BLOG
3	cve_2011_0064_vulnerability_in	http://blogs.oracle.com/sunsecurity/entry/cve_2011_0064_vulnerability_in

その他

No	Name	URL
ISS X-Force Database
1	65770	http://xforce.iss.net/xforce/xfdb/65770
Secunia Advisory
2	SA43572	http://secunia.com/advisories/43572
3	SA43578	http://secunia.com/advisories/43578
SecurityFocus
4	46632	http://www.securityfocus.com/bid/46632
SecurityTracker
5	1025145	http://securitytracker.com/id?1025145
VUPEN Security
6	VUPEN/ADV-2011-0543	http://www.vupen.com/english/advisories/2011/0543

Change Log

No	Changed Details	Date of change
0	[2011年03月28日] 掲載 [2011年09月14日] 影響を受けるシステム：オラクル (cve_2011_0064_vulnerability_in) の情報を追加ベンダ情報：オラクル (cve_2011_0064_vulnerability_in) を追加	Feb. 17, 2018, 10:37 a.m.