Denial of Service and Code Execution Flaw in FreeType Affecting Mozilla Firefox Mobile
CVE-2012-1128

Currently unrated

Key Information:

Vendor

Freetype

Status
Freetype
Firefox Mobile
Vendor
CVE Published:
25 April 2012

What is CVE-2012-1128?

FreeType versions before 2.4.9 are susceptible to a vulnerability that allows remote attackers to initiate a denial of service through NULL pointer dereference and memory corruption. This may lead to the execution of arbitrary code when a specially crafted TrueType font is processed, affecting Mozilla Firefox Mobile and various other software products relying on FreeType for font rendering.

References

http://secunia.com/advisories/48508
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/48822
third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.