PT-2009-4185
CVE-2009-1705
·
تاريخ النشر
2009-06-10
·
تاريخ التحديث
2009-06-13
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Apple Safari version 3.x and earlier on Windows
Description:
The issue is related to the CoreGraphics component in Apple Safari, which does not properly handle arithmetic during automatic hinting of TrueType fonts. This can be exploited by remote attackers using crafted font data, potentially leading to the execution of arbitrary code or causing a denial of service due to memory corruption and application crash.
Recommendations:
For Apple Safari version 3.x and earlier on Windows, update to version 4.0 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾