CVE-2010-4010

CVE-2010-4010 describes an integer signedness error in Apple Type Services (ATS) that affects Mac OS X 10.5.8, permitting remote code execution when a document contains a crafted embedded Compact Font Format (CFF) font. The issue is triggered by improper handling of signed values in the CFF font ...