CVE-2012-1129: Buffer Overflow
An out-of heap-based buffer read flaw was found in the way Type42 font parser of the FreeType font rendering engine performed parsing of certain special font name table (SFNT) strings. A remote attacker could provide a specially-crafted font file, which once opened in an application linked against FreeType would lead to that application crash.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35602
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=82365c0dead99dd119d9e7117cf4f36ce1d1cbe1
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1129?
CVE-2012-1129 has been rated as a moderate severity vulnerability, primarily affecting applications that render fonts.
How do I fix CVE-2012-1129?
To fix CVE-2012-1129, update the FreeType library to version 2.4.9 or later, which addresses this vulnerability.
What applications are affected by CVE-2012-1129?
CVE-2012-1129 affects FreeType versions up to and including 2.4.8 and several versions of Mozilla Firefox Mobile.
Can CVE-2012-1129 be exploited remotely?
Yes, CVE-2012-1129 can be exploited remotely if a user opens a specially-crafted font file in a vulnerable application.
What causes the vulnerability in CVE-2012-1129?
CVE-2012-1129 is caused by an out-of-heap-based buffer read flaw in the Type42 font parser of the FreeType library.