Your submission was sent successfully! Close

CVE-2012-1139

Published: 7 March 2012

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

Priority

Low

Status

Package Release Status
freetype
Launchpad, Ubuntu, Debian 		hardy
Released (2.3.5-1ubuntu4.8.04.9)
lucid
Released (2.3.11-1ubuntu2.6)
maverick
Released (2.4.2-2ubuntu0.4)
natty
Released (2.4.4-1ubuntu2.3)
oneiric
Released (2.4.4-2ubuntu1.2)
upstream
Released (2.4.9)

Notes

AuthorNote
tyhicks 
Reproducer doesn't trigger under valgrind, code is present

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading