PublicDateAtUSN: 2012-03-07
Candidate: CVE-2012-1136
PublicDate: 2012-04-25 10:10:00 UTC
References: 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1136
 https://ubuntu.com/security/notices/USN-1403-1
Description:
 FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and
 other products, allows remote attackers to cause a denial of service
 (invalid heap write operation and memory corruption) or possibly execute
 arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an
 ENCODING field.
Ubuntu-Description: 
Notes: 
Bugs: 
 https://savannah.nongnu.org/bugs/?35641
 https://bugzilla.redhat.com/show_bug.cgi?id=800594
Priority: medium
Discovered-by: Mateusz Jurczyk
Assigned-to: tyhicks
CVSS: 

Patches_freetype:
 upstream: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=4086fb7caf41e33137e548e43a49a97b127cd369
upstream_freetype: released (2.4.9)
hardy_freetype: released (2.3.5-1ubuntu4.8.04.9)
lucid_freetype: released (2.3.11-1ubuntu2.6)
maverick_freetype: released (2.4.2-2ubuntu0.4)
natty_freetype: released (2.4.4-1ubuntu2.3)
oneiric_freetype: released (2.4.4-2ubuntu1.2)
devel_freetype: released (2.4.8-1ubuntu1)