CVE-2011-3193

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Published: 2012-06-15 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2011-3193 is rated High Risk (65/100): CVSS Critical severity, with high exploitation likelihood (EPSS 7.54%, 94th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2011-3193

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 12.65% 7.54% -5.11%
2 2026-06-13 9.73% 12.65% +2.93%
3 2026-05-24 — 9.73% —

Full EPSS history (19 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2011-3193

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
9.3 2.0 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
 8.6 10.0 [email protected]

Weakness enumeration for CVE-2011-3193

OS Trackers for CVE-2011-3193

vendor priority summary link
debian not yet assigned CVE-2011-3193 not yet assigned priority: Debian including 1 source packages (pango1.0), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2011-3193
gentoo normal CVE-2011-3193: 1 GLSA(s) (201311-14), 2 atom(s) (dev-qt/qtcore, dev-qt/qtgui); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2011-3193
redhat medium — https://access.redhat.com/security/cve/CVE-2011-3193
ubuntu low CVE-2011-3193 low priority: Ubuntu including 1 source packages (qt4-x11), 7 status rows across 7 suites (hardy, lucid, maverick, natty, oneiric, precise, upstream): released 3, ignored 2, not-affected 2. https://ubuntu.com/security/CVE-2011-3193

Affected software / configurations for CVE-2011-3193

Vendor Product Version Raw CPE
gnome pango < 1.25.1 cpe:2.3:a:gnome:pango:*:*:*:*:*:*:*:*
qt qt < 4.7.4 cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*
canonical ubuntu_linux 10.04 cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
canonical ubuntu_linux 11.04 cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
redhat enterprise_linux_desktop 4.0 cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*
redhat enterprise_linux_desktop 5.0 cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
redhat enterprise_linux_desktop 6.0 cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
redhat enterprise_linux_eus 6.1 cpe:2.3:o:redhat:enterprise_linux_eus:6.1:*:*:*:*:*:*:*
redhat enterprise_linux_server 4.0 cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*
redhat enterprise_linux_server 5.0 cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
redhat enterprise_linux_server 6.0 cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
redhat enterprise_linux_workstation 4.0 cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*
redhat enterprise_linux_workstation 5.0 cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
redhat enterprise_linux_workstation 6.0 cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
opensuse opensuse 11.3 cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
opensuse opensuse 11.4 cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

References for CVE-2011-3193

URL Tags
http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65 Patch Third Party Advisory
http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08 Patch Third Party Advisory
http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0 Patch Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-1323.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-1324.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-1325.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-1326.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-1327.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-1328.html Third Party Advisory
http://secunia.com/advisories/41537 Third Party Advisory
http://secunia.com/advisories/46117 Third Party Advisory
http://secunia.com/advisories/46118 Third Party Advisory
http://secunia.com/advisories/46119 Third Party Advisory
http://secunia.com/advisories/46128 Third Party Advisory
http://secunia.com/advisories/46371 Third Party Advisory
http://secunia.com/advisories/46410 Third Party Advisory
http://secunia.com/advisories/49895 Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/08/22/6 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/08/24/8 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/08/25/1 Mailing List Third Party Advisory
http://www.osvdb.org/75652 Broken Link
http://www.securityfocus.com/bid/49723 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1504-1 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/69991 Third Party Advisory VDB Entry
https://hermes.opensuse.org/messages/12056605 Broken Link
https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c Broken Link
cvelogic Threat Intelligence