CVE-2012-1135 FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or p...
HighCVSS 9.3
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/freetype(Debian:12) | < 2.4.9-1 | 2.4.9-1 |
| debian/freetype(Debian:13) | < 2.4.9-1 | 2.4.9-1 |
| debian/freetype(Debian:14) | < 2.4.9-1 | 2.4.9-1 |
| freetype | <= 2.4.8 | No fix listed |
| freetype | = 1.3.1 | No fix listed |
| freetype | = 2.0.0 | No fix listed |
| freetype | = 2.0.1 | No fix listed |
| freetype | = 2.0.2 | No fix listed |
| freetype | = 2.0.3 | No fix listed |
| freetype | = 2.0.4 | No fix listed |
| freetype | = 2.0.5 | No fix listed |
| freetype | = 2.0.6 | No fix listed |
| freetype | = 2.0.7 | No fix listed |
| freetype | = 2.0.8 | No fix listed |
| freetype | = 2.0.9 | No fix listed |
| freetype | = 2.1 | No fix listed |
| freetype | = 2.1.3 | No fix listed |
| freetype | = 2.1.4 | No fix listed |
| freetype | = 2.1.5 | No fix listed |
| freetype | = 2.1.6 | No fix listed |
| freetype | = 2.1.7 | No fix listed |
| freetype | = 2.1.8 | No fix listed |
| freetype | = 2.1.8-rc1 | No fix listed |
| freetype | = 2.1.9 | No fix listed |
| freetype | = 2.1.10 | No fix listed |
Show 40 more
| Product | Affected versions | Fixed in |
|---|---|---|
| freetype | = 2.2.0 | No fix listed |
| freetype | = 2.2.1 | No fix listed |
| freetype | = 2.3.0 | No fix listed |
| freetype | = 2.3.1 | No fix listed |
| freetype | = 2.3.2 | No fix listed |
| freetype | = 2.3.3 | No fix listed |
| freetype | = 2.3.4 | No fix listed |
| freetype | = 2.3.5 | No fix listed |
| freetype | = 2.3.6 | No fix listed |
| freetype | = 2.3.7 | No fix listed |
| freetype | = 2.3.8 | No fix listed |
| freetype | = 2.3.9 | No fix listed |
| freetype | = 2.3.10 | No fix listed |
| freetype | = 2.3.11 | No fix listed |
| freetype | = 2.3.12 | No fix listed |
| freetype | = 2.4.0 | No fix listed |
| freetype | = 2.4.1 | No fix listed |
| freetype | = 2.4.2 | No fix listed |
| freetype | = 2.4.3 | No fix listed |
| freetype | = 2.4.4 | No fix listed |
| freetype | = 2.4.5 | No fix listed |
| freetype | = 2.4.6 | No fix listed |
| freetype | = 2.4.7 | No fix listed |
| mozilla firefox mobile | <= 10.0.3 | No fix listed |
| mozilla firefox mobile | = 1.0 | No fix listed |
| mozilla firefox mobile | = 4.0 | No fix listed |
| mozilla firefox mobile | = 4.0-beta1 | No fix listed |
| mozilla firefox mobile | = 4.0-beta2 | No fix listed |
| mozilla firefox mobile | = 4.0-beta3 | No fix listed |
| mozilla firefox mobile | = 4.0-beta4 | No fix listed |
| mozilla firefox mobile | = 5.0 | No fix listed |
| mozilla firefox mobile | = 6.0 | No fix listed |
| mozilla firefox mobile | = 6.0.1 | No fix listed |
| mozilla firefox mobile | = 6.0.2 | No fix listed |
| mozilla firefox mobile | = 7.0 | No fix listed |
| mozilla firefox mobile | = 8.0 | No fix listed |
| mozilla firefox mobile | = 9.0 | No fix listed |
| mozilla firefox mobile | = 10.0 | No fix listed |
| mozilla firefox mobile | = 10.0.1 | No fix listed |
| mozilla firefox mobile | = 10.0.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-1135 vendor-advisory
- APPLE-SA-2012-09-19-1 vendor-advisory
- SUSE-SU-2012:0483 vendor-advisory
- SUSE-SU-2012:0484 vendor-advisory
- openSUSE-SU-2012:0489 vendor-advisory
- SUSE-SU-2012:0521 vendor-advisory
- 48508 third-party-advisory
- 48797 third-party-advisory
- 48822 third-party-advisory
- 48918 third-party-advisory
- 48951 third-party-advisory
- 48973 third-party-advisory
- GLSA-201204-04 vendor-advisory
- support.apple.com
- MDVSA-2012:057 vendor-advisory
- www.mozilla.org vendor-advisory
- [oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9 mailing-list
- 52318 vdb-entry
- 1026765 vdb-entry
- USN-1403-1 vendor-advisory
- bugzilla.mozilla.org
- bugzilla.redhat.com
- bugs.debian.org issue-tracking