CVE-2012-1137
CVE-2012-1137
This page contains facts from public vulnerability sources. Check the original advisory before updating.
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.
EPSS 3.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://secunia.com/advisories/48797
- http://secunia.com/advisories/48508
- http://secunia.com/advisories/48822
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:057
- http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
- http://secunia.com/advisories/48758
- http://support.apple.com/kb/HT5503
- http://www.securityfocus.com/bid/52318
- http://www.ubuntu.com/usn/USN-1403-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=733512
- http://www.openwall.com/lists/oss-security/2012/03/06/16
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
- http://secunia.com/advisories/48973
- http://www.mozilla.org/security/announce/2012/mfsa2012-21.html
- http://rhn.redhat.com/errata/RHSA-2012-0467.html
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html
- https://bugzilla.redhat.com/show_bug.cgi?id=800595
- http://www.securitytracker.com/id?1026765
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html
- http://secunia.com/advisories/48951
- http://security.gentoo.org/glsa/glsa-201204-04.xml
- https://nvd.nist.gov/vuln/detail/CVE-2012-1137