CVE-2012-1142: Buffer Overflow
An out-of heap-based buffer write flaw was found in the way FreeType font rendering engine performed computation of advance width values for certain glyph outlines. A remote attacker could provide a specially-crafted TrueType font file, which once opened in an application linked against FreeType would lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35659
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7d35a7dc7cc621538a1f4a63c83ebf223aace0b0
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Other sources
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1142?
CVE-2012-1142 is classified with a severity rating that indicates it poses a moderate risk due to the potential for remote exploitation.
How do I fix CVE-2012-1142?
To fix CVE-2012-1142, update the FreeType library to version 2.4.9 or later, as this version addresses the vulnerability.
Who is affected by CVE-2012-1142?
CVE-2012-1142 affects various versions of FreeType prior to 2.4.9, as well as specific versions of Mozilla Firefox Mobile up to 10.0.3.
What is the nature of the vulnerability in CVE-2012-1142?
CVE-2012-1142 is an out-of-bounds buffer write vulnerability that occurs when FreeType processes certain malformed TrueType font files.
Can CVE-2012-1142 be exploited remotely?
Yes, CVE-2012-1142 can be exploited remotely if an attacker convinces a user to open a crafted TrueType font file.