CVE-2012-1139

CVSS V2 High 9.3 CVSS V3 None
Description
Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.
Overview
  • CVE ID
  • CVE-2012-1139
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2012-04-25T10:10:18
  • Last Modified Date
  • 2023-02-13T00:23:25
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:* 1 OR 2.4.8
cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:* 1 OR 10.0.3
cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9.3
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www.mozilla.org/security/announce/2012/mfsa2012-21.html Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=733512
https://bugzilla.redhat.com/show_bug.cgi?id=800598
http://www.openwall.com/lists/oss-security/2012/03/06/16
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html
http://security.gentoo.org/glsa/glsa-201204-04.xml
http://secunia.com/advisories/48758
http://secunia.com/advisories/48918
http://rhn.redhat.com/errata/RHSA-2012-0467.html
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
http://support.apple.com/kb/HT5503
http://secunia.com/advisories/48822
http://secunia.com/advisories/48951
http://secunia.com/advisories/48973
http://secunia.com/advisories/48797
http://secunia.com/advisories/48508
http://www.ubuntu.com/usn/USN-1403-1
http://www.securitytracker.com/id?1026765
http://www.securityfocus.com/bid/52318
http://www.mandriva.com/security/advisories?name=MDVSA-2012:057
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2012-1139
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1139
History
Created Old Value New Value Data Type Notes
2022-05-10 07:26:15 Added to TrackCVE
2023-02-02 19:03:30 2023-02-02T18:15:36 CVE Modified Date updated
2023-02-02 19:03:30 Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font. CVE-2012-1139 freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656) Description updated
2023-02-13 01:03:48 2023-02-13T00:23:25 CVE Modified Date updated
2023-02-13 01:03:49 CVE-2012-1139 freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656) Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font. Description updated