About the security content of Mac OS X v10.6.8 and Security Update 2011-004

About the security content of Mac OS X v10.6.8 and Security Update 2011-004 Last Modified: June 23, 2011 Article: HT4723 Email this article Print this page Summary This document describes of Mac OS X v10.6.8 and Security Update 2011-004, which can be downloaded and installed via Software Update...

CVE-2011-0198

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font...

CVE-2011-0198

CVE-2011-0198: Heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X before 10.6.8. A remote attacker could exploit a crafted embedded TrueType font to execute arbitrary code. Affected product: Mac OS X (pre-10.6.8). Impact: remote code execution with partial confidentiality/integri...

Mac OS X 10.6.x < 10.6.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.8. This update contains security-related fixes for the following components : - App Store - ATS - Certificate Trust Policy - CoreFoundation - CoreGraphics - FTP Server - ImageIO - International Components for Unicode -...

Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities

Binary data 800790.prm...

CVE-2011-0177

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

Buffer overflow

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font...

Heap overflow

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font...

Buffer overflow

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

CVE-2011-0175

CVE-2011-0175 involves multiple buffer overflow vulnerabilities in Apple Type Services (ATS) on Mac OS X up to 10.6.7. A crafted embedded TrueType font in a document could trigger heap/buffer overflows, potentially enabling remote arbitrary code execution. The Red Hat/OpenVAS/Nessus references co...

CVE-2011-0175

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font...

CVE-2011-0176

CVE-2011-0176 describes multiple heap/buffer overflow vulnerabilities in Apple Type Services (ATS) on Mac OS X prior to 10.6.7. The flaw allows remote attackers to execute arbitrary code by opening or viewing a document containing a crafted embedded Type 1 font. Affected component is ATS handling...

CVE-2011-0177

CVE-2011-0177 describes multiple buffer overflow issues in Apple Type Services (ATS) on Mac OS X before 10.6.7. A crafted SFNT-embedded font in a document could trigger arbitrary code execution. Affected components include ATS/OpenType font handling; other related CVEs in the same release cover T...

CVE-2011-0174

CVE-2011-0174 describes a heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X prior to 10.6.7. A crafted embedded OpenType font in a document can allow remote arbitrary-code execution. The issue affects Mac OS X 10.6.x up to 10.6.6; Apple’s mitigation is the Mac OS X 10.6.7 Securi...

Mac OS X 10.6.x < 10.6.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.7. Mac OS X 10.6.7 contains security fixes for the following products : - AirPort - Apache - AppleScript - ATS - bzip2 - CarbonCore - ClamAV - CoreText - File Quarantine - HFS - ImageIO - Image RAW - Installer - Kerbero...

Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities

Binary data 800796.prm...

Uttar Pradesh ATS To Investigate The Hacking of Gramin Bank Website !

Uttar Pradesh Anti Terrorist Squad will investigate piracy Ballia-Etawah Gramin Bank site would have been committed by a Pakistani organization, a police official said today. The survey was delivered to the ATS unit Varanasi as it was a case of cyber crime and there is a suspicion on the...

Integer overflow

Integer signedness error in Apple Type Services ATS in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format CFF font in a document...

CVE-2010-4010

CVE-2010-4010 describes an integer signedness error in Apple Type Services (ATS) that affects Mac OS X 10.5.8, permitting remote code execution when a document contains a crafted embedded Compact Font Format (CFF) font. The issue is triggered by improper handling of signed values in the CFF font ...

CVE-2010-1833

Apple Type Services ATS in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted embedded font in a document...