CVE:CVE-2011-0020
CNNVD:CNNVD-201101-347
Gnome Pango是一款国际化文本布局和渲染库。
Pango 1.28.3版本及之前版本存在缓冲区错误漏洞。远程攻击者利用该漏洞导致系统拒绝服务(应用程序崩溃)或者可能执行任意代码。
solution:Upgrade gnome pango to a higher version than 1.28.3,1.28.0,1.28.1,1.28.2,and avoid the version (,1.28.3],1.28.0,1.28.1,1.28.2; Upgrade pango pango to a higher version than 0.20,0.21,0.22,0.23,0.24,0.25,0.26,1.0,1.1,1.2,1.3,1.4,1.5,1.6,1.7,1.8,1.9,1.10,1.11,1.12,1.13,1.14,1.15,1.16,1.17,1.18,1.19,1.20,1.21,1.22,1.23,1.24,1.25,1.26,1.27,and avoid the version 0.20,0.21,0.22,0.23,0.24,0.25,0.26,1.0,1.1,1.2,1.3,1.4,1.5,1.6,1.7,1.8,1.9,1.10,1.11,1.12,1.13,1.14,1.15,1.16,1.17,1.18,1.19,1.20,1.21,1.22,1.23,1.24,1.25,1.26,1.27