This host has installed with Pango and is prone to Integer Buffer Overflow vulnerability

Successful exploitation will allow attacker to execute arbitrary code via a long glyph string, and can cause denial of service. Impact Level: Application

Upgrade to pango version 1.24.0 or later http://ftp.acc.umu.se/pub/GNOME/sources/pango/

Error in pango_glyph_string_set_size function in pango/glyphstring.c file, which fails to perform adequate boundary checks on user-supplied data before using the data to allocate memory buffers.

Pango version prior to 1.24.0

• http://secunia.com/advisories/35018
• http://www.debian.org/security/2009/dsa-1798
• http://www.openwall.com/lists/oss-security/2009/05/07/1

---

Updated on 2015-03-25