CVE-2008-1575

CVE-2008-1575 refers to an Apple Type Services (ATS) server memory corruption vulnerability in Mac OS X versions prior to 10.5.3, enabling arbitrary code execution when a crafted embedded font in a PDF is printed. The issue is described as user‑assisted remote code execution, related to how ATS h...

About the security content of Security Update 2008-003 / Mac OS X 10.5.3

About the security content of Security Update 2008-003 / Mac OS X 10.5.3 Last Modified: May 28, 2008 Article: HT1897 Summary This document describes the security content of Security Update 2008-003 / Mac OS X 10.5.3, which can be downloaded and installed via Software Update preferences, or from...

CVE-2006-4396

The Apple Type Services ATS server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack...

CVE-2006-4398

Multiple buffer overflows in the Apple Type Services ATS server in Mac OS X 10.4 through 10.4.8 allow local users to execute arbitrary code via crafted service requests...

CVE-2006-4398

CVE-2006-4398 refers to multiple buffer overflow vulnerabilities in the Apple Type Services (ATS) server included with Mac OS X 10.4.x (up to 10.4.8). The root cause is multiple buffer overflows in the ATS service, which can be triggered by crafted service requests sent to the ATS server, allowin...

CVE-2006-4400

CVE-2006-4400 describes a stack-based buffer overflow in the Apple Type Services (ATS) server on Mac OS X 10.4.8 and earlier, triggered when processing crafted font files. The vulnerability could allow a user-assisted attacker to execute arbitrary code with system privileges. Affected products in...

CVE-2006-4396

The CVE-2006-4396 issue affects Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier. The ATS server fails to securely create log files, which can allow a local attacker to overwrite or create files with system privileges via unspecified vectors (possibly related to a symlink attack). ...

Mac OS X Multiple Vulnerabilities (Security Update 2006-007)

The remote host is running a version of Mac OS X which does not have the security update 2006-007 applied. Security Update 2006-007 contains several security fixes for the following programs : - AirPort - ATS - CFNetwork - Finder - Font Book - Font Importer - Installer - OpenSSL - PHP - PPP - Sam...