CVE-2012-1143
Published: 7 March 2012
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.
Notes
Author | Note |
---|---|
tyhicks | Reproducer doesn't trigger on hardy, but code is present |
Priority
Status
Package | Release | Status |
---|---|---|
freetype Launchpad, Ubuntu, Debian |
hardy |
Released
(2.3.5-1ubuntu4.8.04.9)
|
lucid |
Released
(2.3.11-1ubuntu2.6)
|
|
maverick |
Released
(2.4.2-2ubuntu0.4)
|
|
natty |
Released
(2.4.4-1ubuntu2.3)
|
|
oneiric |
Released
(2.4.4-2ubuntu1.2)
|
|
upstream |
Released
(2.4.9)
|
|
Patches: upstream: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=ba67957d5ead443f4b6b31805d6e780d54361ca4 |