Simon Huang

An input validation issue was addressed with improved memory handling. Unpacking a maliciously crafted archive may lead to arbitrary code execution.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application.

The issue involves the `QuickTime` component and allows remote attackers to execute arbitrary code or cause a denial of service, including memory corruption and application crash, via a crafted media file. This is due to a buffer overflow on the stack.

The issue involves the `ATS` component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted font. This is caused by a buffer overflow in memory.

The issue involves the `FontParser` component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted font, resulting in a buffer overflow and application crash.