CVE-2012-1132

The connected MiracleLinux security advisory AXSA:2012-513:02 fixes multiple FreeType CVEs, including CVE-2012-1132. MiracleLinux 4 lists freetype-2.3.11-6.AXS4.9 as affected; the advisory indicates a backported patch addresses the listed CVEs and notes the Remote host requires updated packages. ...

CVE-2012-1144

CVE-2012-1144 affects FreeType before 2.4.9 and is among multiple font-related flaws in FreeType used by Mozilla Firefox Mobile and other products. It can cause denial of service via invalid heap write and memory corruption and may allow arbitrary code execution through crafted fonts (notably Tru...

CVE-2012-1143

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service divide-by-zero error via a crafted font...

CVE-2012-1144

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via a crafted TrueType font...

CVE-2012-1140

CVE-2012-1140 : FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, can be exploited by a crafted PostScript font object to cause a denial of service (invalid heap read and memory corruption) or possibly execute arbitrary code. The vulnerability is rooted in...

CVE-2012-1130

CVE-2012-1130 concerns the FreeType library: FreeType before 2.4.9 can be exploited via crafted PCF fonts to cause a remote denial of service or memory corruption, with potential code execution when used by Mozilla Firefox Mobile and other products. Connected documents reference multiple vendor a...

CVE-2012-1137

CVE-2012-1137 targets FreeType, specifically versions before 2.4.9 used by Mozilla Firefox Mobile and other products. The vulnerability arises from processing BDF fonts, where a crafted header can cause an invalid heap read and memory corruption, leading to denial of service and possibly remote c...

CVE-2012-1141

CVE-2012-1141 affects FreeType before 2.4.9 (as used in Mozilla Firefox Mobile and other products). The underlying issue is an invalid heap read in BDF font handling, enabling a remote attacker to cause a denial of service or potentially execute arbitrary code via a crafted ASCII string in a BDF ...

CVE-2012-1134

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font...

CVE-2012-1126

CVE-2012-1126 (and related CVEs 1127, 1128, 1129, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144) affect FreeType prior to 2.4.9. The issue arises when parsing various font formats (BDF, TrueType, Type 1, CFF/PD, etc.) used by FreeType in Firefox Mobile a...

CVE-2012-1132

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via crafted dictionary data in a Type 1 font...

CVE-2012-1127

CVE-2012-1127 affects the FreeType font engine (versions before 2.4.9 as used by Mozilla Firefox Mobile and other products). The issue allows remote attackers to cause a denial of service (invalid heap read or memory corruption) or possibly execute arbitrary code via crafted font data (glyphs/bit...

CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

CVE-2012-1137

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via a crafted header in a BDF font...

CVE-2012-1143

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service divide-by-zero error via a crafted font...

CVE-2012-1142

CVE-2012-1142 refers to FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products. The issue allows a remote attacker to cause a denial of service (invalid heap write operation and memory corruption) or potentially execute arbitrary code through crafted glyph-outli...

CVE-2012-1134

FreeType before 2.4.9 (as used in Mozilla Firefox Mobile before 10.0.4 and other products) is vulnerable via crafted font data (Type 1, TrueType, BDF, etc.), enabling denial of service and possibly arbitrary code execution. Impact is described as invalid heap/write, memory corruption, or related ...

CVE-2012-1137

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via a crafted header in a BDF font...

CVE-2012-1132

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via crafted dictionary data in a Type 1 font...

CVE-2012-1138

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font...