Simon Huang

Um problema de validação de entrada foi corrigido com o aprimoramento do gerenciamento de memória. Descompactar um arquivo criado de forma maliciosa pode levar à execução de código arbitrário.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application.

The issue involves the `QuickTime` component and allows remote attackers to execute arbitrary code or cause a denial of service, including memory corruption and application crash, via a crafted media file. This is due to a buffer overflow on the stack.

The issue involves the `ATS` component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted font. This is caused by a buffer overflow in memory.

The issue involves the `FontParser` component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted font, resulting in a buffer overflow and application crash.