CVE-2012-1140

Published: 7 March 2012

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.

Priority

Status

Package	Release	Status
freetype Launchpad, Ubuntu, Debian	hardy	Released (2.3.5-1ubuntu4.8.04.9)
	lucid	Released (2.3.11-1ubuntu2.6)
	maverick	Released (2.4.2-2ubuntu0.4)
	natty	Released (2.4.4-1ubuntu2.3)
	oneiric	Released (2.4.4-2ubuntu1.2)
	upstream	Released (2.4.9)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1140
https://ubuntu.com/security/notices/USN-1403-1
NVD
Launchpad
Debian

Bugs

https://savannah.nongnu.org/bugs/?35657
https://bugzilla.redhat.com/show_bug.cgi?id=800600

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›