PT-2009-4185 · Apple · Coregraphics+1

Clint Ruoho + 1 · Publicado 2009-06-10 · Atualizado 2009-06-13 · CVE-2009-1705

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apple Safari version 3.x and earlier on Windows

Description: The issue is related to the CoreGraphics component in Apple Safari, which does not properly handle arithmetic during automatic hinting of TrueType fonts. This can be exploited by remote attackers using crafted font data, potentially leading to the execution of arbitrary code or causing a denial of service due to memory corruption and application crash.

Recommendations: For Apple Safari version 3.x and earlier on Windows, update to version 4.0 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2009-1705

Produtos afetados

Coregraphics

Safari

Referências · 8

• 🔥 http://securityfocus.com/bid/35260 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1705 · Nota de Segurança
• http://secunia.com/advisories/35379 · Aviso do Fabricante
• http://support.apple.com/kb/HT3613 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1522 · Aviso do Fabricante
• http://securityfocus.com/bid/35308 · Nota
• http://osvdb.org/54974 · Nota