Felix Grobert

The issue is related to an off-by-one error in the CoreFoundation framework, which can be exploited by context-dependent attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. This is achieved through a CFString object that triggers a buffer overflow.

The issue is related to an integer overflow in CoreGraphics, which can be triggered by a crafted embedded Type 1 font in a PDF document. This can allow remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash.

A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a document containing a crafted embedded OpenType font.

The issue is related to multiple buffer overflows in Apple Type Services (ATS) that allow remote attackers to execute arbitrary code. This can be achieved by using a document containing a crafted embedded TrueType font.

The issue is related to multiple buffer overflows in Apple Type Services (ATS) that allow remote attackers to execute arbitrary code. This can be achieved by providing a document containing a crafted SFNT table in an embedded font.

The issue is related to multiple buffer overflows in Apple Type Services (ATS) that allow remote attackers to execute arbitrary code via a document containing a crafted embedded Type 1 font.