Apple Mac OS X Apple Type Services ".dfont"字体文件内存破坏漏洞

BUGTRAQ ID: 51832 CVE ID: CVE-2011-3446 Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Apple Mac OS X在打开Font Book中的恶意字体时存在内存破坏漏洞，攻击者可利用此漏洞在受影响应用程序中执行任意代码。 0 Apple Mac OS X 10.7.2 Apple Mac OS X 10.7.1 Apple MacOS X Server 10.7.2 Apple MacOS X Server 10.7.1 Apple MacOS X Server 10.7 Apple MacOS X Server 10.6...

CVE-2011-3446

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

Code injection

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

CVE-2011-3446

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

CVE-2011-3446

Summary: CVE-2011-3446 affects Apple Type Services (ATS) in Mac OS X up to 10.7.3. The vulnerability stems from improper memory management for data-font files, enabling remote code execution or a denial of service when a crafted font is opened by Font Book. Affected product/component: Apple Mac O...

Apple Mac OS X ATS data-font memory corruption vulnerability

Overview Apple Mac OS X ATS contains a memory corruption vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple Mac OS X ATS Apple Type Services fails to properly handle malformed data-font .dfont files, resulting in...

CVE-2011-3446: Undefined Security Weakness

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

PT-2012-1696

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 Description The issue is related to the improper management of memory for data-font files by Apple Type Services ATS in Apple Mac OS X. This can be exploited by remote attackers to execute arbitrary code...

Mac OS X Multiple Vulnerabilities (Security Update 2006-007)

The remote host is running a version of Mac OS X which does not have the security update 2006-007 applied. Security Update 2006-007 contains several security fixes for the following programs : - AirPort - ATS - CFNetwork - Finder - Font Book - Font Importer - Installer - OpenSSL - PHP - PPP - Sam...