EUVD-2016-2892

Malware in sbrugna...

(Pwn2Own) Apple OS X fontd Sandbox Escape Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sandbox policy for the fontd process. The issue lies in the failure to properly ensure...

CVE-2016-1797

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1797

CVE-2016-1797 corresponds to Apple OS X El Capitan ATS sandbox-escape via FontValidator. A crafted app could bypass the FontValidator sandbox policy, allowing arbitrary code execution with system/kernel privileges. ZDI-16-360 describes the flaw as within the fontd sandbox policy, enabling an atta...

CVE-2016-1797

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app...