CVE-2008-4236

Apple Type Services ATS in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service infinite loop via a crafted embedded font in a PDF file...

CVE-2008-2305

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."...