CVE-2012-1133: Buffer Overflow
An out-of heap-based buffer write flaw was found in the way FreeType font rendering engine performed parsing of glyph information and bitmaps for certain glyph bitmap distribution format (BDF) fonts. A remote attacker could provide a specially-crafted BDF font file, which once opened in an application linked against FreeType would lead to that application crash, or, potentially, arbitrary code execution with the privileges of the user running the application.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35607
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=28dd2c45957278e962f95633157b6139de8170aa
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1133?
The severity of CVE-2012-1133 is rated as medium due to the potential for remote code execution when processing malicious BDF font files.
How do I fix CVE-2012-1133?
To fix CVE-2012-1133, update FreeType to version 2.4.9 or later, or apply the appropriate patches provided by your vendor.
What versions of FreeType are affected by CVE-2012-1133?
CVE-2012-1133 affects FreeType versions up to and including 2.4.8, as well as version 1.3.1 and specific older versions.
How can CVE-2012-1133 be exploited?
CVE-2012-1133 can be exploited by an attacker sending a specially-crafted BDF font file to a victim's system, leading to potential code execution.
Which applications are vulnerable because of CVE-2012-1133?
Applications that use the FreeType library for font rendering, especially those with outdated versions, are vulnerable due to CVE-2012-1133.