Every CVE Search/ Get API key

CVE-2011-3193

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz...

9.3 HighFix available

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Exploit likelihood

7.17%Up 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Record
CVE-2011-3193
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Record
CVE-2011-3193
Updated
2026-11-02
EUVDEUVD-2011-3157 No score

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Record
EUVD-2011-3157
Updated
2026-11-03
GitHub AdvisoriesGHSA-gw56-35qp-gch8 No score

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz...

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Record
GHSA-gw56-35qp-gch8
Weakness
CWE-787
Updated
2026-11-02
OSV No score

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Record
CVE-2011-3193
Updated
2026-11-02
OSVDEBIAN-CVE-2011-3193 No score

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Record
DEBIAN-CVE-2011-3193
Updated
2026-11-02
OSVopenSUSE-SU-2024:10180-1 No score

libqt4-32bit-4.8.7-5.4 on GA media

These are all security issues fixed in the libqt4-32bit-4.8.7-5.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10180-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pango1.0
Debian:12
 before 1.28.3-1
1.28.3-1
pango1.0
Debian:13
 before 1.28.3-1
1.28.3-1
pango1.0
Debian:14
 before 1.28.3-1
1.28.3-1
qt4-x11
Debian:6.0
 before 4:4.6.3-4+squeeze2, plus listed versions
4:4.6.3-44:4.6.3-4+squeeze1
4:4.6.3-4+squeeze2
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-devel
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-doc
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-mysql
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
Show 100 moreShow less
Affected packages
PackageAffectedFixed
qt-odbc
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-postgresql
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-sqlite
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-x11
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-demos
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt-examples
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-17.el6_1.1
1:4.6.2-17.el6_1.1
qt4
Red Hat:enterprise_linux:5::client
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-doc
Red Hat:enterprise_linux:5::client
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-mysql
Red Hat:enterprise_linux:5::client
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-odbc
Red Hat:enterprise_linux:5::client
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-postgresql
Red Hat:enterprise_linux:5::client
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-sqlite
Red Hat:enterprise_linux:5::client
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4
Red Hat:enterprise_linux:5::server
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-devel
Red Hat:enterprise_linux:5::server
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-doc
Red Hat:enterprise_linux:5::server
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-mysql
Red Hat:enterprise_linux:5::server
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-odbc
Red Hat:enterprise_linux:5::server
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-postgresql
Red Hat:enterprise_linux:5::server
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
qt4-sqlite
Red Hat:enterprise_linux:5::server
 before 0:4.2.1-1.el5_7.1
0:4.2.1-1.el5_7.1
evolution28-pango
Red Hat:enterprise_linux:4::as
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango-devel
Red Hat:enterprise_linux:4::as
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango
Red Hat:enterprise_linux:4::desktop
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango-devel
Red Hat:enterprise_linux:4::desktop
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango
Red Hat:enterprise_linux:4::es
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango-devel
Red Hat:enterprise_linux:4::es
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango
Red Hat:enterprise_linux:4::ws
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
evolution28-pango-devel
Red Hat:enterprise_linux:4::ws
 before 0:1.14.9-13.el4_11
0:1.14.9-13.el4_11
pango
Red Hat:enterprise_linux:5::client
 before 0:1.14.9-8.el5_7.3
0:1.14.9-8.el5_7.3
pango-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.14.9-8.el5_7.3
0:1.14.9-8.el5_7.3
pango
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.14.9-8.el5_7.3
0:1.14.9-8.el5_7.3
pango-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.14.9-8.el5_7.3
0:1.14.9-8.el5_7.3
pango-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.14.9-8.el5_7.3
0:1.14.9-8.el5_7.3
pango
Red Hat:enterprise_linux:5::server
 before 0:1.14.9-8.el5_7.3
0:1.14.9-8.el5_7.3
pango-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.14.9-8.el5_7.3
0:1.14.9-8.el5_7.3
pango-devel
Red Hat:enterprise_linux:5::server
 before 0:1.14.9-8.el5_7.3
0:1.14.9-8.el5_7.3
frysk
Red Hat:enterprise_linux:4::as
 before 0:0.0.1.2007.08.03-8.el4
0:0.0.1.2007.08.03-8.el4
frysk-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:0.0.1.2007.08.03-8.el4
0:0.0.1.2007.08.03-8.el4
frysk
Red Hat:enterprise_linux:4::desktop
 before 0:0.0.1.2007.08.03-8.el4
0:0.0.1.2007.08.03-8.el4
frysk-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:0.0.1.2007.08.03-8.el4
0:0.0.1.2007.08.03-8.el4
frysk
Red Hat:enterprise_linux:4::es
 before 0:0.0.1.2007.08.03-8.el4
0:0.0.1.2007.08.03-8.el4
frysk-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:0.0.1.2007.08.03-8.el4
0:0.0.1.2007.08.03-8.el4
frysk
Red Hat:enterprise_linux:4::ws
 before 0:0.0.1.2007.08.03-8.el4
0:0.0.1.2007.08.03-8.el4
frysk-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:0.0.1.2007.08.03-8.el4
0:0.0.1.2007.08.03-8.el4
qt
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-demos
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-devel
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-doc
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-examples
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-mysql
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-odbc
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-postgresql
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-sqlite
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-x11
Red Hat:enterprise_linux:6::client
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-demos
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-devel
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-doc
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-examples
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-mysql
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-odbc
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-postgresql
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-sqlite
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-x11
Red Hat:enterprise_linux:6::computenode
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-demos
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-examples
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-devel
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-doc
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-mysql
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-odbc
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-postgresql
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-sqlite
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-x11
Red Hat:enterprise_linux:6::server
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-demos
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-examples
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-devel
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-doc
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-mysql
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-odbc
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-postgresql
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-sqlite
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6
qt-x11
Red Hat:enterprise_linux:6::workstation
 before 1:4.6.2-20.el6
1:4.6.2-20.el6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-3193 is a high vulnerability (CVSS 9.3) in Gnome Pango, published June 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.17%, the 94th percentile. Fixed in pango1.0 1.28.3-1.

References

Show 63 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open