4.3

CVE-2012-1143

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freetype ≫ Freetype Version <= 2.4.8
Freetype ≫ Freetype Version 1.3.1
Freetype ≫ Freetype Version 2.0.0
Freetype ≫ Freetype Version 2.0.1
Freetype ≫ Freetype Version 2.0.2
Freetype ≫ Freetype Version 2.0.3
Freetype ≫ Freetype Version 2.0.4
Freetype ≫ Freetype Version 2.0.5
Freetype ≫ Freetype Version 2.0.6
Freetype ≫ Freetype Version 2.0.7
Freetype ≫ Freetype Version 2.0.8
Freetype ≫ Freetype Version 2.0.9
Freetype ≫ Freetype Version 2.1
Freetype ≫ Freetype Version 2.1.3
Freetype ≫ Freetype Version 2.1.4
Freetype ≫ Freetype Version 2.1.5
Freetype ≫ Freetype Version 2.1.6
Freetype ≫ Freetype Version 2.1.7
Freetype ≫ Freetype Version 2.1.8
Freetype ≫ Freetype Version 2.1.8 Update rc1
Freetype ≫ Freetype Version 2.1.9
Freetype ≫ Freetype Version 2.1.10
Freetype ≫ Freetype Version 2.2.0
Freetype ≫ Freetype Version 2.2.1
Freetype ≫ Freetype Version 2.3.0
Freetype ≫ Freetype Version 2.3.1
Freetype ≫ Freetype Version 2.3.2
Freetype ≫ Freetype Version 2.3.3
Freetype ≫ Freetype Version 2.3.4
Freetype ≫ Freetype Version 2.3.5
Freetype ≫ Freetype Version 2.3.6
Freetype ≫ Freetype Version 2.3.7
Freetype ≫ Freetype Version 2.3.8
Freetype ≫ Freetype Version 2.3.9
Freetype ≫ Freetype Version 2.3.10
Freetype ≫ Freetype Version 2.3.11
Freetype ≫ Freetype Version 2.3.12
Freetype ≫ Freetype Version 2.4.0
Freetype ≫ Freetype Version 2.4.1
Freetype ≫ Freetype Version 2.4.2
Freetype ≫ Freetype Version 2.4.3
Freetype ≫ Freetype Version 2.4.4
Freetype ≫ Freetype Version 2.4.5
Freetype ≫ Freetype Version 2.4.6
Freetype ≫ Freetype Version 2.4.7
Mozilla ≫ Firefox Mobile Version <= 10.0.3
Mozilla ≫ Firefox Mobile Version 1.0
Mozilla ≫ Firefox Mobile Version 4.0
Mozilla ≫ Firefox Mobile Version 4.0 Update beta1
Mozilla ≫ Firefox Mobile Version 4.0 Update beta2
Mozilla ≫ Firefox Mobile Version 4.0 Update beta3
Mozilla ≫ Firefox Mobile Version 4.0 Update beta4
Mozilla ≫ Firefox Mobile Version 5.0
Mozilla ≫ Firefox Mobile Version 6.0
Mozilla ≫ Firefox Mobile Version 6.0.1
Mozilla ≫ Firefox Mobile Version 6.0.2
Mozilla ≫ Firefox Mobile Version 7.0
Mozilla ≫ Firefox Mobile Version 8.0
Mozilla ≫ Firefox Mobile Version 9.0
Mozilla ≫ Firefox Mobile Version 10.0
Mozilla ≫ Firefox Mobile Version 10.0.1
Mozilla ≫ Firefox Mobile Version 10.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.57% 0.722
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/48951
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
http://support.apple.com/kb/HT5503
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html
http://rhn.redhat.com/errata/RHSA-2012-0467.html
http://secunia.com/advisories/48508
http://secunia.com/advisories/48758
http://secunia.com/advisories/48797
http://secunia.com/advisories/48822
http://secunia.com/advisories/48918
http://secunia.com/advisories/48973
http://security.gentoo.org/glsa/glsa-201204-04.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2012:057
http://www.mozilla.org/security/announce/2012/mfsa2012-21.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/03/06/16
http://www.securityfocus.com/bid/52318
http://www.securitytracker.com/id?1026765
http://www.ubuntu.com/usn/USN-1403-1
https://bugzilla.mozilla.org/show_bug.cgi?id=733512
https://bugzilla.redhat.com/show_bug.cgi?id=800606