Apple Patches Pwn2Own Flaw That Hacked Safari

Apple today shipped a patch to fix the drive-by download vulnerability used by Charlie Miller left to hack a fully patched MacBook via the Safari browser. Miller’s hack was part of this year’s CanSecWest Pwn2Own contest where Apple’s flagship browser fell for the third straight year. In the attac...

Buffer overflow

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document...

CVE-2009-2824

CVE-2009-2824 affects Apple Type Services (ATS) in Mac OS X 10.5.8. The vulnerability arises from multiple buffer overflows in ATS when handling embedded fonts in documents, enabling remote attackers to execute arbitrary code. The exploit vector is a crafted embedded font within a document. The i...

CVE-2009-2824

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document...

Mac OS X Multiple Vulnerabilities (Security Update 2009-006)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2009-006 applied. This security update contains fixes for the following products : - AFP Client - Adaptive Firewall - Apache - Apache Portable Runtime - ATS - Certificate Assistant - CoreGraphics - CUPS -...

About the security content of Security Update 2009-002 / Mac OS X v10.5.7

About the security content of Security Update 2009-002 / Mac OS X v10.5.7 Last Modified: May 12, 2009 Article: HT3549 Summary This document describes the security content of Security Update 2009-002 / Mac OS X v10.5.7, which can be downloaded and installed via Software Update preferences, or from...

Heap overflow

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format CFF font...

CVE-2009-0154

CVE-2009-0154 is a heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X 10.4.11 and 10.5 prior to 10.5.7, triggered by parsing a crafted Compact Font Format (CFF) font. Remote code execution is possible via a malicious font, as described by ZDI and the Apple Security Update notes. ...

CVE-2009-0154

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format CFF font...

Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. Mac OS X 10.5.7 contains security fixes for the following products : - Apache - ATS - BIND - CFNetwork - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - iChat -...

Mac OS X Multiple Vulnerabilities (Security Update 2009-002)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied. This security update contains fixes for the following products : - Apache - ATS - BIND - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - IPSec -...

CVE-2008-4236

Apple Type Services ATS in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service infinite loop via a crafted embedded font in a PDF file...

CVE-2008-4236

Apple Type Services ATS in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service infinite loop via a crafted embedded font in a PDF file...

CVE-2008-4236

CVE-2008-4236 affects Apple Type Services (ATS) in Mac OS X 10.5 before 10.5.6. A crafted embedded font in a PDF file can cause a denial of service (infinite loop) when processed by ATS. The issue is addressed in Mac OS X 10.5.6 Security Update (and related updates) by adding validation for embed...

About the security content of Security Update 2008-008 / Mac OS X v10.5.6

About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Last Modified: December 15, 2008 Article: HT3338 Summary This document describes the security content of Security Update 2008-008 / Mac OS X v10.5.6, which can be downloaded and installed via Software Update preferences, or...

Mac OS X 10.5.x < 10.5.6 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.6. Mac OS X 10.5.6 contains security fixes for the following products : - ATS - BOM - CoreGraphics - CoreServices - CoreTypes - Flash Player Plug-in - Kernel - Libsystem - Managed Client - networkcmds - Podcast Producer...

CVE-2008-2305

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."...

CVE-2008-2305

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."...

CVE-2008-2305

CVE-2008-2305 describes a heap-based buffer overflow in Apple Type Services (ATS) affecting Mac OS X 10.4.11 and 10.5 up to 10.5.4, exploitable via a document containing a crafted PostScript font name and potentially allowing remote code execution. The connected OpenVAS entries reference Mac OS X...

CVE-2008-1575

Unspecified vulnerability in the Apple Type Services ATS server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via a crafted embedded font in a PDF document, related to memory corruption that occurs during printing...