Harfbuzz contains an integer underflow error in the 'myanmar_shape_syllable' function in harfbuzz-myanmar.c that is triggered as user-supplied input is not properly validated when handling glyphs. With specially crafted text, a context-dependent attacker can cause a stack-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.

The vendor has released a patch to address this vulnerability. There are no known workarounds or upgrades to correct this issue. Check the vendor advisory, changelog, or solution in the references section for details.

Upgrade to Google Chrome version 16.0.912.75 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1026487
• OVAL ID: 14871
• CVE ID: 2011-3922 (see also: NVD)
• SCIP VulDB ID: 4522
• Secunia Advisory ID: 47445 47449 47645 49604
• Bugtraq ID: 51300
• Related OSVDB ID: 78148 78149
• Vendor Specific Advisory URL: http://code.google.com/p/chromium/issues/detail?id=108006
• Vendor Specific News/Changelog Entry: http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.html
  http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00021.html
  http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00022.html
  http://security.gentoo.org/glsa/glsa-201201-03.xml
  https://codereview.chromium.org/8997001 [ Auth Req'd ]
• RedHat RHSA: RHSA-2012:0880

• Cris Neckar - Google Chrome Security Team