CVE-2012-1133

EUVD-2012-1167
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
freetypefreetype
𝑥
≤ 2.4.8
freetypefreetype
1.3.1
freetypefreetype
2.0.0
freetypefreetype
2.0.1
freetypefreetype
2.0.2
freetypefreetype
2.0.3
freetypefreetype
2.0.4
freetypefreetype
2.0.5
freetypefreetype
2.0.6
freetypefreetype
2.0.7
freetypefreetype
2.0.8
freetypefreetype
2.0.9
freetypefreetype
2.1
freetypefreetype
2.1.3
freetypefreetype
2.1.4
freetypefreetype
2.1.5
freetypefreetype
2.1.6
freetypefreetype
2.1.7
freetypefreetype
2.1.8
freetypefreetype
2.1.8:rc1
freetypefreetype
2.1.9
freetypefreetype
2.1.10
freetypefreetype
2.2.0
freetypefreetype
2.2.1
freetypefreetype
2.3.0
freetypefreetype
2.3.1
freetypefreetype
2.3.2
freetypefreetype
2.3.3
freetypefreetype
2.3.4
freetypefreetype
2.3.5
freetypefreetype
2.3.6
freetypefreetype
2.3.7
freetypefreetype
2.3.8
freetypefreetype
2.3.9
freetypefreetype
2.3.10
freetypefreetype
2.3.11
freetypefreetype
2.3.12
freetypefreetype
2.4.0
freetypefreetype
2.4.1
freetypefreetype
2.4.2
freetypefreetype
2.4.3
freetypefreetype
2.4.4
freetypefreetype
2.4.5
freetypefreetype
2.4.6
freetypefreetype
2.4.7
mozillafirefox_mobile
𝑥
≤ 10.0.3
mozillafirefox_mobile
1.0
mozillafirefox_mobile
4.0
mozillafirefox_mobile
4.0:beta1
mozillafirefox_mobile
4.0:beta2
mozillafirefox_mobile
4.0:beta3
mozillafirefox_mobile
4.0:beta4
mozillafirefox_mobile
5.0
mozillafirefox_mobile
6.0
mozillafirefox_mobile
6.0.1
mozillafirefox_mobile
6.0.2
mozillafirefox_mobile
7.0
mozillafirefox_mobile
8.0
mozillafirefox_mobile
9.0
mozillafirefox_mobile
10.0
mozillafirefox_mobile
10.0.1
mozillafirefox_mobile
10.0.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freetype
bookworm
2.12.1+dfsg-5+deb12u3
fixed
bullseye
2.10.4+dfsg-1+deb11u1
fixed
sid
2.13.3+dfsg-1
fixed
trixie
2.13.3+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freetype
hardy
Fixed 2.3.5-1ubuntu4.8.04.9
released
lucid
Fixed 2.3.11-1ubuntu2.6
released
maverick
Fixed 2.4.2-2ubuntu0.4
released
natty
Fixed 2.4.4-1ubuntu2.3
released
oneiric
Fixed 2.4.4-2ubuntu1.2
released
References