CVE-2012-1128: Buffer Overflow
A NULL pointer dereference flaw as found in the way TrueType bytecode interpreter of the FreeType font rendering engine performed movement of the zone2 pointer point for certain TrueType fonts. A remote attacker could provide a specially-crafted TrueType font file, which once opened in an application linked against FreeType would lead to that application crash.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35601
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=96cddb8d1d32d6738b06552083db9d6cee5b5cb4
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1128?
CVE-2012-1128 has been classified with a high severity due to its ability to cause a NULL pointer dereference in the FreeType library.
How do I fix CVE-2012-1128?
To fix CVE-2012-1128, update FreeType to version 2.4.9 or later, which addresses the NULL pointer dereference vulnerability.
Which software is affected by CVE-2012-1128?
Affected software includes various versions of the FreeType font rendering engine prior to 2.4.9.
Can CVE-2012-1128 be exploited remotely?
Yes, CVE-2012-1128 can be exploited remotely by an attacker using a specially-crafted TrueType font file.
What are the consequences of exploiting CVE-2012-1128?
Exploiting CVE-2012-1128 can lead to application crashes or arbitrary code execution due to the NULL pointer dereference.