CVE:CVE-2011-3193
CNNVD:CNNVD-201109-363
Pango是一个开放源码的自由函数库，用于高质量地渲染国际化的文字。
使用在Qt 4.7.4之前版本和Pango中的HarfBuzz（harfbuzz-gpos.c）模块中的Lookup_MarkMarkPos函数中存在基于堆的缓冲区溢出漏洞。远程攻击者可利用该漏洞通过特制的字体文件导致拒绝服务（崩溃），执行任意代码。
solution:Upgrade gnome pango to a higher version than 1.25.1,and avoid the version (,1.25.1); Upgrade qt qt to a higher version than 4.7.4,and avoid the version (,4.7.4); Upgrade canonical ubuntu_linux to a higher version than 10.04,11.04,and avoid the version 10.04,11.04; Upgrade redhat enterprise_linux_desktop to a higher version than 4.0,5.0,6.0,and avoid the version 4.0,5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.1,and avoid the version 6.1; Upgrade redhat enterprise_linux_server to a higher version than 4.0,5.0,6.0,and avoid the version 4.0,5.0,6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 4.0,5.0,6.0,and avoid the version 4.0,5.0,6.0; Upgrade opensuse opensuse to a higher version than 11.3,11.4,and avoid the version 11.3,11.4