CVE-2012-1134: Buffer Overflow
An out-of heap-based buffer write flaw was found in the way Type1 font parser of the FreeType font rendering engine retrieved private dictionar information for certain Type1 fonts. A remote attacker could provide a specially-crafted font file, which once opened in an application linked against FreeType would lead to that application crash, or, potentially, arbitrary code execution with the privileges of the user running the application.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35608
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=d9577add645c8c05460c7d60ad486c021394b82e
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1134?
CVE-2012-1134 is classified as a medium severity vulnerability.
How do I fix CVE-2012-1134?
To fix CVE-2012-1134, update FreeType to version 2.4.9 or later.
What software is affected by CVE-2012-1134?
CVE-2012-1134 affects multiple versions of the FreeType font rendering engine and certain versions of Mozilla Firefox Mobile.
What type of vulnerability is CVE-2012-1134?
CVE-2012-1134 is an out-of-bounds write vulnerability related to Type1 font parsing.
Can CVE-2012-1134 be exploited remotely?
Yes, CVE-2012-1134 can be exploited remotely by an attacker using a specially crafted font file.