CVE-2012-4190

Firefox < 16.0 - Memory Corruption via FT2FontEntry::CreateFontEntry

Title source: llm
STIX 2.1

Description

The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/79208
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=790139
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027653

Scores

EPSS 0.0420
EPSS Percentile 89.8%

Details

CWE
CWE-119
Status published
Products (46)
cyanogenmod/cyanogenmod 10
mozilla/firefox 0.1
mozilla/firefox 0.2
mozilla/firefox 0.3
mozilla/firefox 0.4
mozilla/firefox 0.5
mozilla/firefox 0.6
mozilla/firefox 0.6.1
mozilla/firefox 0.7
mozilla/firefox 0.7.1
... and 36 more
Published Oct 12, 2012
Tracked Since Feb 18, 2026