CVE-2012-1126

freetype: heap buffer over-read in BDF parsing _bdf_is_atom() (#35597, #35598)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1127

freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#35599, #35600)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1128

freetype: NULL dereference in the SHZ instruction implementation in TTF BCI (#35601)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 4.6% KEV · Not listed

Vendors

Freetype Mozilla

Products

Freetype Firefox Mobile

CVE-2012-1129

freetype: heap off-by-one buffer underflow in Type42 parser t42_parse_sfnts() (#35602)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla

Products

Freetype Firefox Mobile

CVE-2012-1130

freetype: heap buffer over-read in PCF parser pcf_get_properties() (#35603)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1131

freetype: incorrect type cast allowing input sanity check bypass in ft_smooth_render_generic() (#35604)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1132

freetype: heap buffer over-read in Type1 parser parse_subrs() (#35606)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1133

freetype: heap buffer underflow in BDF parser _bdf_parse_glyphs() (#35607)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed

Vendors

Freetype Mozilla

Products

Freetype Firefox Mobile

CVE-2012-1134

freetype: limited heap buffer overflow in Type1 parser T1_Get_Private_Dict() (#35608)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.

CVSS 2.0 · 9.3 Critical EPSS 4.6% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1135

freetype: heap off by one read in boundary check for NPUSHB and NPUSHW instructions in TTF BIC (#35640)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed

Vendors

Freetype Mozilla

Products

Freetype Firefox Mobile

CVE-2012-1136

freetype: uninitialized pointer use in BDF parser _bdf_parse_glyphs() (#35641)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1137

freetype: heap buffer off-by-one in BDF parsing _bdf_list_ensure() (#35643)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1138

freetype: heap OOB read in the MIRP instruction implementation in TTF BCI (#35646)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed

Vendors

Freetype Mozilla

Products

Freetype Firefox Mobile

CVE-2012-1139

freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656)

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1140

freetype: multiple buffer over-read in PS parser conversion functions (#35657)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1141

freetype: BDF parser _bdf_list_split() fails to properly initialize field array (#35658)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1142

freetype: incorrect computation of number of glyphs in FNT_Face_Init() for FNT/FON files (#35659)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1143

freetype: integer divide by zero in FT_DivFix() (#35660)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1144

freetype: insufficient checking of first outline point in TTF parser (#35689)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1937

Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 9.3 Critical EPSS 4.6% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Thunderbird and 2 more