cbcvebase.
CVE-2012-1130
published 2012-04-25

CVE-2012-1130: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap…

critical9.3CVSS 3.1
AVNACMAuNCCICAC
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.

Affected

62 ranges· showing 25
VendorProductVersion rangeFixed in
debianfreetype< freetype 2.4.9-1 (bookworm)freetype 2.4.9-1 (bookworm)
freetypefreetype<= 2.4.8
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype
freetypefreetype

CVSS provenance

nvd9.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL