CVE-2012-1126

Published: 7 March 2012

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.

Priority

Status

Package	Release	Status
freetype Launchpad, Ubuntu, Debian	hardy	Released (2.3.5-1ubuntu4.8.04.9)
	lucid	Released (2.3.11-1ubuntu2.6)
	maverick	Released (2.4.2-2ubuntu0.4)
	natty	Released (2.4.4-1ubuntu2.3)
	oneiric	Released (2.4.4-2ubuntu1.2)
	upstream	Released (2.4.9)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1126
https://ubuntu.com/security/notices/USN-1403-1
NVD
Launchpad
Debian

Bugs

https://savannah.nongnu.org/bugs/?35597
https://savannah.nongnu.org/bugs/?35598
https://bugzilla.redhat.com/show_bug.cgi?id=800581

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›