CVE-2012-1126

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
freetypefreetype
𝑥
≤ 2.4.8
freetypefreetype
1.3.1
freetypefreetype
2.0.0
freetypefreetype
2.0.1
freetypefreetype
2.0.2
freetypefreetype
2.0.3
freetypefreetype
2.0.4
freetypefreetype
2.0.5
freetypefreetype
2.0.6
freetypefreetype
2.0.7
freetypefreetype
2.0.8
freetypefreetype
2.0.9
freetypefreetype
2.1
freetypefreetype
2.1.3
freetypefreetype
2.1.4
freetypefreetype
2.1.5
freetypefreetype
2.1.6
freetypefreetype
2.1.7
freetypefreetype
2.1.8
freetypefreetype
2.1.8:rc1
freetypefreetype
2.1.9
freetypefreetype
2.1.10
freetypefreetype
2.2.0
freetypefreetype
2.2.1
freetypefreetype
2.3.0
freetypefreetype
2.3.1
freetypefreetype
2.3.2
freetypefreetype
2.3.3
freetypefreetype
2.3.4
freetypefreetype
2.3.5
freetypefreetype
2.3.6
freetypefreetype
2.3.7
freetypefreetype
2.3.8
freetypefreetype
2.3.9
freetypefreetype
2.3.10
freetypefreetype
2.3.11
freetypefreetype
2.3.12
freetypefreetype
2.4.0
freetypefreetype
2.4.1
freetypefreetype
2.4.2
freetypefreetype
2.4.3
freetypefreetype
2.4.4
freetypefreetype
2.4.5
freetypefreetype
2.4.6
freetypefreetype
2.4.7
mozillafirefox_mobile
𝑥
≤ 10.0.3
mozillafirefox_mobile
1.0
mozillafirefox_mobile
4.0
mozillafirefox_mobile
4.0:beta1
mozillafirefox_mobile
4.0:beta2
mozillafirefox_mobile
4.0:beta3
mozillafirefox_mobile
4.0:beta4
mozillafirefox_mobile
5.0
mozillafirefox_mobile
6.0
mozillafirefox_mobile
6.0.1
mozillafirefox_mobile
6.0.2
mozillafirefox_mobile
7.0
mozillafirefox_mobile
8.0
mozillafirefox_mobile
9.0
mozillafirefox_mobile
10.0
mozillafirefox_mobile
10.0.1
mozillafirefox_mobile
10.0.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freetype
bullseye
2.10.4+dfsg-1+deb11u1
fixed
bookworm
2.12.1+dfsg-5+deb12u3
fixed
sid
2.13.3+dfsg-1
fixed
trixie
2.13.3+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freetype
oneiric
Fixed 2.4.4-2ubuntu1.2
released
natty
Fixed 2.4.4-1ubuntu2.3
released
maverick
Fixed 2.4.2-2ubuntu0.4
released
lucid
Fixed 2.3.11-1ubuntu2.6
released
hardy
Fixed 2.3.5-1ubuntu4.8.04.9
released
References