Description
Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194.
References
- APPLE-SA-2009-08-11-1 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=480134
- APPLE-SA-2009-09-10-2 vendor-advisory
- 35758 vdb-entry
- 1022717 vdb-entry
- http://www.mozilla.org/security/announce/2009/mfsa2009-36.html
- http://support.apple.com/kb/HT3865
- 36701 third-party-advisory
- 35914 third-party-advisory
- ADV-2009-1972 vdb-entry
- 264308 vendor-advisory
- http://support.apple.com/kb/HT3733