Description
YoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service (application crash) via a crafted emoji character sequence.
References
- JVN#94816361 third-party-advisory
- http://jvn.jp/en/jp/JVN94816361/995844/index.html
- JVNDB-2016-000151 third-party-advisory
- 92609 vdb-entry