Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Melissa Oneill

Researcher fromHarvey Mudd College
#27281of 53,633
9.3Total CVSS
Vulnerabilities · 1
PT-2008-3132
9.3
2008-06-02
Apple · Macos X · CVE-2008-1575
**Name of the Vulnerable Software and Affected Versions** Apple Mac OS X versions prior to 10.5.3 **Description** The issue is related to an unspecified vulnerability in the Apple Type Services (ATS) server, allowing user-assisted remote attackers to execute arbitrary code via a crafted embedded font in a PDF document. This is due to memory corruption that occurs during printing. **Recommendations** For Apple Mac OS X versions prior to 10.5.3, update to version 10.5.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted embedded fonts in PDF documents until the update is applied. Restrict access to printing functions to minimize the risk of exploitation.