Description
CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-5761.
References
- https://support.apple.com/HT205221
- https://support.apple.com/kb/HT205030
- 1033275 vdb-entry
- APPLE-SA-2015-08-13-2 vendor-advisory
- APPLE-SA-2015-09-16-3 vendor-advisory
- APPLE-SA-2015-08-13-3 vendor-advisory
- https://support.apple.com/kb/HT205031
- 76343 vdb-entry