REDHAT-BUG-800594
First published: Tue Mar 06 2012(Updated: )
An out-of heap-based buffer write flaw was found in the way FreeType font rendering engine performed parsing of glyph and bitmaps information for glyph bitmap distribution format (BDF) font files, that were missing definition of the ENCODING field. A remote attacker could provide a specially-crafted BDF font file, which once opened in an application linked against FreeType would lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application. Upstream bug report: [1] <a href="https://savannah.nongnu.org/bugs/?35641">https://savannah.nongnu.org/bugs/?35641</a> Upstream patch: [2] <a href="http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=4086fb7caf41e33137e548e43a49a97b127cd369">http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=4086fb7caf41e33137e548e43a49a97b127cd369</a> Acknowledgements: Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FreeType |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://savannah.nongnu.org/bugs/?35641
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=4086fb7caf41e33137e548e43a49a97b127cd369
- http://www.openwall.com/lists/oss-security/2012/03/06/16
- https://rhn.redhat.com/errata/RHSA-2012-0467.html
- https://bugzilla.redhat.com/show_bug.cgi?id=800594
Frequently Asked Questions
What is the severity of REDHAT-BUG-800594?
The severity of REDHAT-BUG-800594 is considered critical due to the potential for remote code execution.
How do I fix REDHAT-BUG-800594?
To fix REDHAT-BUG-800594, update FreeType to the latest patched version that addresses the buffer write flaw.
What is the impact of REDHAT-BUG-800594?
The impact of REDHAT-BUG-800594 includes the possibility for remote attackers to execute arbitrary code on affected systems.
Which versions of FreeType are affected by REDHAT-BUG-800594?
FreeType versions prior to the fix for REDHAT-BUG-800594 are affected by this vulnerability.
Can REDHAT-BUG-800594 be exploited remotely?
Yes, REDHAT-BUG-800594 can be exploited remotely by providing specially-crafted BDF font files.
- collector/redhat-bugzilla
- alias/CVE-2012-1136
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/description
- agent/severity
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/freetype
- canonical/freetype