Memory Corruption Vulnerability in FreeType Library for Multiple Products
CVE-2012-1138

Currently unrated

Key Information:

Vendor

Freetype

Status
Freetype
Firefox Mobile
Vendor
CVE Published:
25 April 2012

What is CVE-2012-1138?

The FreeType library prior to version 2.4.9, used in several products including Mozilla Firefox Mobile, contains a vulnerability that can be exploited by remote attackers. This flaw may lead to a denial of service via invalid heap read operations or memory corruption caused by the maliciously crafted TrueType fonts utilizing the MIRP instruction, posing a risk for arbitrary code execution.

References

http://secunia.com/advisories/48797
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/48508
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/48822
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.