CVE-2016-1797

CVE-2016-1797 corresponds to Apple OS X El Capitan ATS sandbox-escape via FontValidator. A crafted app could bypass the FontValidator sandbox policy, allowing arbitrary code execution with system/kernel privileges. ZDI-16-360 describes the flaw as within the fontd sandbox policy, enabling an atta...