CVE-2012-1141: Buffer Overflow
An out-of heap-based buffer read flaw was found in the way FreeType font rendering engine performed conversion of ASCII string objects, contained within glyph bitmap distribution format (BDF) font file, into signed short integers. A remote attacker could provide a specially-crafted BDF file, which once processed by an application linked against FreeType would lead to that application crash.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35658
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=d9c1659610f9cd5e103790cb5963483d65cf0d2d
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1141?
CVE-2012-1141 is considered to have a medium severity due to the potential for remote code execution through crafted BDF files.
How do I fix CVE-2012-1141?
To fix CVE-2012-1141, update FreeType to version 2.4.9 or later, which addresses the vulnerability.
Which versions of FreeType are affected by CVE-2012-1141?
Versions of FreeType before 2.4.9 and including 1.3.1 to 2.4.7 are affected by CVE-2012-1141.
Can CVE-2012-1141 be exploited remotely?
Yes, CVE-2012-1141 can be exploited remotely if a user opens a maliciously crafted BDF file.
What kind of attacks can CVE-2012-1141 facilitate?
CVE-2012-1141 can facilitate attacks leading to buffer overflow, which may result in arbitrary code execution.