CVE-2012-1132: Buffer Overflow
An out-of heap-based buffer read flaw was found in the way Type1 font loader of FreeType font rendering engine performed parsing of certain Type1 font dictionary entries. A remote attacker could provide a specially-crafted font file, which once opened in an application linked against FreeType would lead to that application crash.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35606
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=58cbc465d2ccd904dee755cff791fbb3a866646d
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1132?
CVE-2012-1132 is rated as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2012-1132?
To fix CVE-2012-1132, update FreeType to a version that is not affected, specifically any version above 2.4.8 or apply the necessary patches provided by the vendor.
What applications are affected by CVE-2012-1132?
CVE-2012-1132 affects applications linked against vulnerable versions of the FreeType library, including certain versions of Mozilla Firefox Mobile.
Is CVE-2012-1132 a client-side vulnerability?
Yes, CVE-2012-1132 is typically considered a client-side vulnerability as it can be exploited through applications that render fonts.
What can be done to mitigate CVE-2012-1132 before applying the fix?
To mitigate CVE-2012-1132, avoid opening untrusted font files or applications that utilize vulnerable versions of FreeType until they are updated.