CVE-2009-1194

CVE-2009-1194 describes an integer overflow vulnerability in the pango_glyph_string_set_size function within Pango versions prior to 1.24. This flaw allows context-dependent attackers to trigger a denial of service (application crash) or potentially execute arbitrary code through a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring moderate attack complexity and potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.