CVE-2012-1140: Buffer Overflow
An out-of heap-based buffer read flaw was found in the way auxiliary PostScript driver of the FreeType font rendering engine performed conversion of certain PostScript font objects. A remote attacker could provide a specially-crafted PostScript font file, which once opened in an application linked against FreeType would lead to that application crash.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35657
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=292144b44a15c1a72f2ef76475d65b7a3a3fba67
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1140?
The severity of CVE-2012-1140 is classified as moderate due to the potential for an attacker to exploit a buffer read flaw.
How do I fix CVE-2012-1140?
To fix CVE-2012-1140, it is recommended to update FreeType to version 2.4.9 or later.
Which versions of FreeType are affected by CVE-2012-1140?
CVE-2012-1140 affects FreeType versions up to 2.4.8, as well as specific versions 1.3.1 through 2.3.12.
Are mobile browsers also affected by CVE-2012-1140?
Yes, certain versions of Mozilla Firefox Mobile up to 10.0.3 are affected by CVE-2012-1140.
What type of attack does CVE-2012-1140 enable?
CVE-2012-1140 enables remote attackers to execute arbitrary code via specially-crafted PostScript font files.