CVE-2012-1129

Published: 7 March 2012

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.

Priority

Status

Package	Release	Status
freetype Launchpad, Ubuntu, Debian	hardy	Released (2.3.5-1ubuntu4.8.04.9)
	lucid	Released (2.3.11-1ubuntu2.6)
	maverick	Released (2.4.2-2ubuntu0.4)
	natty	Released (2.4.4-1ubuntu2.3)
	oneiric	Released (2.4.4-2ubuntu1.2)
	upstream	Released (2.4.9)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1129
https://ubuntu.com/security/notices/USN-1403-1
NVD
Launchpad
Debian

Bugs

https://savannah.nongnu.org/bugs/?35602
https://bugzilla.redhat.com/show_bug.cgi?id=800585

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›