PT-2009-4185

CVE-2009-1705

·

Publicado

2009-06-10

·

Atualizado

2009-06-13

Descrição por

CVSS 2.0
9.3
Alta
MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Apple Safari version 3.x and earlier on Windows
Description: The issue is related to the CoreGraphics component in Apple Safari, which does not properly handle arithmetic during automatic hinting of TrueType fonts. This can be exploited by remote attackers using crafted font data, potentially leading to the execution of arbitrary code or causing a denial of service due to memory corruption and application crash.
Recommendations: For Apple Safari version 3.x and earlier on Windows, update to version 4.0 or later to resolve the issue.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾