CVE-2012-1130: Buffer Overflow
An out-of heap-based buffer read flaw was found in the way FreeType font rendering engine retrieved properties information from Portable Compiled Format (PCF) bitmap font files. A remote attacker could provide a specially-crafted PCF font file, which once opened in an application linked against FreeType would lead to that application crash.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35603
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c776fc17bfeaa607405fc96620e9445e7a0965c3
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1130?
CVE-2012-1130 has a high severity rating due to the potential for remote code execution by exploiting the flaw.
How do I fix CVE-2012-1130?
To fix CVE-2012-1130, update FreeType to the latest version that has patched this vulnerability.
Which FreeType versions are affected by CVE-2012-1130?
FreeType versions prior to 2.4.9 and including certain 1.x versions are affected by CVE-2012-1130.
Can CVE-2012-1130 be exploited remotely?
Yes, CVE-2012-1130 can be exploited remotely through specially crafted PCF font files.
What applications are at risk from CVE-2012-1130?
Applications that utilize the FreeType engine for font rendering are at risk from CVE-2012-1130.