Heap overflow

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format CFF font...

CVE-2009-0154

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format CFF font...

CVE-2009-0154

CVE-2009-0154 is a heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X 10.4.11 and 10.5 prior to 10.5.7, triggered by parsing a crafted Compact Font Format (CFF) font. Remote code execution is possible via a malicious font, as described by ZDI and the Apple Security Update notes. ...

Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. Mac OS X 10.5.7 contains security fixes for the following products : - Apache - ATS - BIND - CFNetwork - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - iChat -...

Mac OS X Multiple Vulnerabilities (Security Update 2009-002)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied. This security update contains fixes for the following products : - Apache - ATS - BIND - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - IPSec -...

CVE-2008-4236

Apple Type Services ATS in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service infinite loop via a crafted embedded font in a PDF file...

CVE-2008-4236

Apple Type Services ATS in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service infinite loop via a crafted embedded font in a PDF file...

CVE-2008-4236

CVE-2008-4236 affects Apple Type Services (ATS) in Mac OS X 10.5 before 10.5.6. A crafted embedded font in a PDF file can cause a denial of service (infinite loop) when processed by ATS. The issue is addressed in Mac OS X 10.5.6 Security Update (and related updates) by adding validation for embed...

About the security content of Security Update 2008-008 / Mac OS X v10.5.6

About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Last Modified: December 15, 2008 Article: HT3338 Summary This document describes the security content of Security Update 2008-008 / Mac OS X v10.5.6, which can be downloaded and installed via Software Update preferences, or...

Mac OS X 10.5.x < 10.5.6 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.6. Mac OS X 10.5.6 contains security fixes for the following products : - ATS - BOM - CoreGraphics - CoreServices - CoreTypes - Flash Player Plug-in - Kernel - Libsystem - Managed Client - networkcmds - Podcast Producer...

CVE-2008-2305

CVE-2008-2305 describes a heap-based buffer overflow in Apple Type Services (ATS) affecting Mac OS X 10.4.11 and 10.5 up to 10.5.4, exploitable via a document containing a crafted PostScript font name and potentially allowing remote code execution. The connected OpenVAS entries reference Mac OS X...

CVE-2008-2305

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."...

CVE-2008-2305

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."...

CVE-2008-1575

Unspecified vulnerability in the Apple Type Services ATS server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via a crafted embedded font in a PDF document, related to memory corruption that occurs during printing...

CVE-2008-1575

CVE-2008-1575 refers to an Apple Type Services (ATS) server memory corruption vulnerability in Mac OS X versions prior to 10.5.3, enabling arbitrary code execution when a crafted embedded font in a PDF is printed. The issue is described as user‑assisted remote code execution, related to how ATS h...

About the security content of Security Update 2008-003 / Mac OS X 10.5.3

About the security content of Security Update 2008-003 / Mac OS X 10.5.3 Last Modified: May 28, 2008 Article: HT1897 Summary This document describes the security content of Security Update 2008-003 / Mac OS X 10.5.3, which can be downloaded and installed via Software Update preferences, or from...

CVE-2006-4398

Multiple buffer overflows in the Apple Type Services ATS server in Mac OS X 10.4 through 10.4.8 allow local users to execute arbitrary code via crafted service requests...

CVE-2006-4396

The Apple Type Services ATS server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack...

CVE-2006-4396

The CVE-2006-4396 issue affects Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier. The ATS server fails to securely create log files, which can allow a local attacker to overwrite or create files with system privileges via unspecified vectors (possibly related to a symlink attack). ...

CVE-2006-4398

CVE-2006-4398 refers to multiple buffer overflow vulnerabilities in the Apple Type Services (ATS) server included with Mac OS X 10.4.x (up to 10.4.8). The root cause is multiple buffer overflows in the ATS service, which can be triggered by crafted service requests sent to the ATS server, allowin...