CVE-2012-1135

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font.

• freetype freetype (<= 2.4.8) • freetype freetype 1.3.1 • freetype freetype 2.0.0 • freetype freetype 2.0.1 • freetype freetype 2.0.2 • freetype freetype 2.0.3 • freetype freetype 2.0.4 • freetype freetype 2.0.5 • freetype freetype 2.0.6 • freetype freetype 2.0.7 • freetype freetype 2.0.8 • freetype freetype 2.0.9 • freetype freetype 2.1 • freetype freetype 2.1.3 • freetype freetype 2.1.4 • freetype freetype 2.1.5 • freetype freetype 2.1.6 • freetype freetype 2.1.7 • freetype freetype 2.1.8 • freetype freetype 2.1.9 • freetype freetype 2.1.10 • freetype freetype 2.2.0 • freetype freetype 2.2.1 • freetype freetype 2.3.0 • freetype freetype 2.3.1 • freetype freetype 2.3.2 • freetype freetype 2.3.3 • freetype freetype 2.3.4 • freetype freetype 2.3.5 • freetype freetype 2.3.6 • freetype freetype 2.3.7 • freetype freetype 2.3.8 • freetype freetype 2.3.9 • freetype freetype 2.3.10 • freetype freetype 2.3.11 • freetype freetype 2.3.12 • freetype freetype 2.4.0 • freetype freetype 2.4.1 • freetype freetype 2.4.2 • freetype freetype 2.4.3 • freetype freetype 2.4.4 • freetype freetype 2.4.5 • freetype freetype 2.4.6 • freetype freetype 2.4.7 • mozilla firefox mobile (<= 10.0.3) • mozilla firefox mobile 1.0 • mozilla firefox mobile 4.0 • mozilla firefox mobile 5.0 • mozilla firefox mobile 6.0 • mozilla firefox mobile 6.0.1 • mozilla firefox mobile 6.0.2 • mozilla firefox mobile 7.0 • mozilla firefox mobile 8.0 • mozilla firefox mobile 9.0 • mozilla firefox mobile 10.0 • mozilla firefox mobile 10.0.1 • mozilla firefox mobile 10.0.2