CVE-2012-1136: Buffer Overflow
An out-of heap-based buffer write flaw was found in the way FreeType font rendering engine performed parsing of glyph and bitmaps information for glyph bitmap distribution format (BDF) font files, that were missing definition of the ENCODING field. A remote attacker could provide a specially-crafted BDF font file, which once opened in an application linked against FreeType would lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35641
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=4086fb7caf41e33137e548e43a49a97b127cd369
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1136?
CVE-2012-1136 has a moderate severity rating due to its potential for privilege escalation.
How do I fix CVE-2012-1136?
To fix CVE-2012-1136, update FreeType to a version that is 2.4.9 or later.
What types of software are affected by CVE-2012-1136?
CVE-2012-1136 affects multiple versions of FreeType and certain versions of Mozilla Firefox Mobile.
Can CVE-2012-1136 be exploited remotely?
Yes, CVE-2012-1136 can be exploited remotely, allowing attackers to execute arbitrary code.
What is the nature of the vulnerability in CVE-2012-1136?
The vulnerability in CVE-2012-1136 is an out-of-bounds write flaw in the FreeType font rendering engine.