Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-1137

Опубликовано: 27 фев. 2012
Источник: redhat
CVSS2: 4.3

Описание

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4freetypeNot affected
Red Hat Enterprise Linux 5freetypeFixedRHSA-2012:046710.04.2012
Red Hat Enterprise Linux 6freetypeFixedRHSA-2012:046710.04.2012

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-122
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=800595freetype: heap buffer off-by-one in BDF parsing _bdf_list_ensure() (#35643)

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
почти 14 лет назад

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

nvd
почти 14 лет назад

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

debian
почти 14 лет назад

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 ...

github
больше 3 лет назад

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

oracle-oval
почти 14 лет назад

ELSA-2012-0467: freetype security update (IMPORTANT)

4.3 Medium

CVSS2