Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-jqjv-gjbe-dbfg
Summary
Mateusz Jurczyk of the Google Security Team used the Address
Sanitizer tool to discover a series of memory safety bugs in the FreeType
library, some of which could cause memory corruption and exploitable crashes
with certain fonts and font parsing. Firefox Mobile has been upgraded to
FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not
use Freetype for fonts and was not affected.
On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates.
Aliases
0
alias CVE-2012-1126
Fixed_packages
0
url pkg:deb/debian/freetype@2.4.9-1.1%2Bdeb7u3
purl pkg:deb/debian/freetype@2.4.9-1.1%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6bcv-2cx6-77es
1
vulnerability VCID-8zjm-pmh1-p7a2
2
vulnerability VCID-keyh-yygz-y7ep
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.4.9-1.1%252Bdeb7u3
1
url pkg:mozilla/Firefox%20Mobile@10.0.4
purl pkg:mozilla/Firefox%20Mobile@10.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520Mobile@10.0.4
Affected_packages
0
url pkg:deb/debian/freetype@1.0.0.1998-03-22-1
purl pkg:deb/debian/freetype@1.0.0.1998-03-22-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@1.0.0.1998-03-22-1
1
url pkg:deb/debian/freetype@1.2-3
purl pkg:deb/debian/freetype@1.2-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@1.2-3
2
url pkg:deb/debian/freetype@1.3.1-1
purl pkg:deb/debian/freetype@1.3.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@1.3.1-1
3
url pkg:deb/debian/freetype@2.0.9-1
purl pkg:deb/debian/freetype@2.0.9-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.0.9-1
4
url pkg:deb/debian/freetype@2.1.7-8
purl pkg:deb/debian/freetype@2.1.7-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.1.7-8
5
url pkg:deb/debian/freetype@2.2.1-5
purl pkg:deb/debian/freetype@2.2.1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.2.1-5
6
url pkg:deb/debian/freetype@2.2.1-5%2Betch4
purl pkg:deb/debian/freetype@2.2.1-5%2Betch4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.2.1-5%252Betch4
7
url pkg:deb/debian/freetype@2.3.7-2%2Blenny8
purl pkg:deb/debian/freetype@2.3.7-2%2Blenny8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.3.7-2%252Blenny8
8
url pkg:deb/debian/freetype@2.4.2-2.1%2Bsqueeze4
purl pkg:deb/debian/freetype@2.4.2-2.1%2Bsqueeze4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.4.2-2.1%252Bsqueeze4
9
url pkg:deb/debian/freetype@2.4.2-2.1%2Bsqueeze6
purl pkg:deb/debian/freetype@2.4.2-2.1%2Bsqueeze6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yvb-7w2n-ybhg
1
vulnerability VCID-31q8-w6bh-zuey
2
vulnerability VCID-6bcv-2cx6-77es
3
vulnerability VCID-6jeb-n9un-3qhd
4
vulnerability VCID-79xr-2yux-37ea
5
vulnerability VCID-8sk7-1vxp-9bgd
6
vulnerability VCID-8zjm-pmh1-p7a2
7
vulnerability VCID-aswe-3g48-wfgm
8
vulnerability VCID-e4yc-a8j8-mqfq
9
vulnerability VCID-fe3g-ww6q-hqa8
10
vulnerability VCID-g8bk-9bsd-p7bk
11
vulnerability VCID-jqjv-gjbe-dbfg
12
vulnerability VCID-kemx-zuam-uqab
13
vulnerability VCID-keyh-yygz-y7ep
14
vulnerability VCID-kwd7-sv6y-eyh8
15
vulnerability VCID-psxs-t1t2-bkba
16
vulnerability VCID-r47y-we15-pqg3
17
vulnerability VCID-tvvd-q7nw-eyey
18
vulnerability VCID-vx31-mywv-1fhr
19
vulnerability VCID-xxs6-891m-t3bm
20
vulnerability VCID-z2q3-ejur-8uhb
21
vulnerability VCID-z66j-hvpb-9ydk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.4.2-2.1%252Bsqueeze6
References
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1126
reference_id CVE-2012-1126
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1126
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2012-21
reference_id mfsa2012-21
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2012-21
Weaknesses
Exploits
Severity_range_score9.0 - 10.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-jqjv-gjbe-dbfg