(Pwn2Own) Apple OS X fontd Sandbox Escape Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sandbox policy for the fontd process. The issue lies in the failure to properly ensure...

Apple Mac OS X ATS fontd local elevation of privilege vulnerability

Apple Mac OS X is a popular operating system. Apple Mac OS X has a security vulnerability in ATS fontd that allows local attackers to exploit the vulnerability to elevate privileges...

CVE-2015-1134

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135...

CVE-2015-1133

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1134, and CVE-2015-1135...

CVE-2015-1131

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1132, CVE-2015-1133, CVE-2015-1134, and CVE-2015-1135...

CVE-2015-1131

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1132, CVE-2015-1133, CVE-2015-1134, and CVE-2015-1135...

CVE-2015-1132

Technical details for CVE-2015-1132 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2015-1131

Technical details for CVE-2015-1131 are not publicly available in the provided connected documents; the materials reference related CVEs but do not specify affected components, root cause, impact, or fixes. Monitor for updates.

CVE-2015-1134

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135...

CVE-2015-1133

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1134, and CVE-2015-1135...

CVE-2015-1133

CVE-2015-1133 concerns the fontd component of Apple Type Services (ATS) on macOS, where local privilege escalation is possible on affected builds prior to macOS 10.10.3. The description indicates an unspecified attack vector and notes this as a separate issue from other CVEs in the same family (1...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02344)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd has an unspecified input validation vulnerability that allows local users to exploit the vulnerability to elevate privileges...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02345)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd has an unspecified input validation vulnerability that allows local users to exploit the vulnerability to elevate privileges...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02341)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd suffers from an unspecified input validation vulnerability that allows attackers to exploit the vulnerability to elevate privileges...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02343)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd has an unspecified input validation vulnerability that allows local users to exploit the vulnerability to elevate privileges...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02342)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd suffers from an unspecified input validation vulnerability that allows local attackers to exploit the vulnerability to elevate privileges...

Mac OS X < 10.10.3 Multiple Vulnerabilities

Binary data 8672.prm...