NetSight
IP …
critical9.3

CVE-2012-1140

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap r…

Impact

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.

Affected products

VendorProductAffected versions
FreetypeFreetype
through 2.4.8
Versions 1.3.1, 2.0.0, 2.0.1, 2.0.2, 2.0.3
MozillaFirefox Mobile
through 10.0.3
Versions 1.0, 4.0, 5.0, 6.0, 6.0.1

Weakness classification

CWE-119

References