CVE-2012-5669

Description

The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.687

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2013:0216) Important: freetype security update freetype-2.2.1-32.el5_9.1.i386.rpm	Linux
(RHSA-2013:0216) Important: freetype security update freetype-2.2.1-32.el5_9.1.x86_64.rpm	Linux
(RHSA-2013:0216) Important: freetype security update freetype-demos-2.2.1-32.el5_9.1.i386.rpm	Linux
(RHSA-2013:0216) Important: freetype security update freetype-demos-2.2.1-32.el5_9.1.x86_64.rpm	Linux
(RHSA-2013:0216) Important: freetype security update freetype-devel-2.2.1-32.el5_9.1.i386.rpm	Linux
(RHSA-2013:0216) Important: freetype security update freetype-devel-2.2.1-32.el5_9.1.x86_64.rpm	Linux
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5669)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234