Unscored CVE-2010-4010 EUVD-2010-3986GHSA-92xw-jc8h-7jc6

Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a craf…

Published Nov 16, 2010 · Updated Aug 7, 2024 · Assigned by apple

Description

Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format (CFF) font in a document.

References

macos-ats-cff-code-execution(63170) vdb-entry
http://support.apple.com/kb/HT4435
APPLE-SA-2010-11-10-1 vendor-advisory