Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-1132

Опубликовано: 23 фев. 2012
Источник: redhat
CVSS2: 2.6

Описание

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.

Дополнительная информация

Статус:

Low
Дефект:
CWE-122
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=800590freetype: heap buffer over-read in Type1 parser parse_subrs() (#35606)

2.6 Low

CVSS2

Связанные уязвимости

ubuntu
больше 13 лет назад

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.

nvd
больше 13 лет назад

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.

debian
больше 13 лет назад

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 ...

github
больше 3 лет назад

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.

oracle-oval
больше 13 лет назад

ELSA-2012-0467: freetype security update (IMPORTANT)

2.6 Low

CVSS2