Description
CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document that contains a crafted embedded font.
References
- APPLE-SA-2011-03-21-1 vendor-advisory
- http://support.apple.com/kb/HT4581