Ben Syverson

**Name of the Vulnerable Software and Affected Versions** Apple Mac OS X versions prior to 10.8.4 **Description** A stack consumption issue in CoreAnimation allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted text glyph in a URL encountered by Safari. **Recommendations** For Apple Mac OS X versions prior to 10.8.4, update to version 10.8.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** CoreUI in Apple Mac OS X versions 10.7.x through 10.7.2 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service due to improper restriction of stack memory allocation. This can be achieved via a long URL. **Recommendations** For CoreUI in Apple Mac OS X versions 10.7.x through 10.7.2, update to version 10.7.3 or later to resolve the issue.