CVE-2012-1127: Buffer Overflow
An out-of heap-based buffer read flaw was found in the way FreeType font rendering engine performed parsing of glyph information and relevant bitmaps for glyph bitmap distribution format (BDF). A remote attacker could provide a specially-crafted BDF font file, which once opened in an application linked against FreeType would lead to that application crash.
Upstream bug reports: [1] https://savannah.nongnu.org/bugs/?35599 [2] https://savannah.nongnu.org/bugs/?35600
Upstream patch: [3] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0b1c0c6b20bf121096afff206d570f26183402b3
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1127?
CVE-2012-1127 has been classified as a medium severity vulnerability.
How do I fix CVE-2012-1127?
To fix CVE-2012-1127, you should update FreeType to version 2.4.9 or later.
What applications are affected by CVE-2012-1127?
CVE-2012-1127 affects various versions of FreeType, including all versions prior to 2.4.9.
Can CVE-2012-1127 be exploited remotely?
Yes, a remote attacker can exploit CVE-2012-1127 using a specially-crafted BDF font file.
What kind of vulnerability is CVE-2012-1127?
CVE-2012-1127 is an out-of-bounds read vulnerability in the FreeType font rendering engine.