CVEvulnerability
CVE-2009-1705
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-06-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data.
Affected configurations
• apple safari (<= 3.2.3)
• apple safari 3.0
• apple safari 3.0.1
• apple safari 3.0.2
• apple safari 3.0.3
• apple safari 3.0.4
• apple safari 3.1
• apple safari 3.1.1
• apple safari 3.1.2
• apple safari 3.2
• apple safari 3.2.1
• apple safari 3.2.2
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://osvdb.org/54974 osvdb.org
- http://secunia.com/advisories/35379 Vendor Advisory
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35260 Exploit, Patch
- http://www.securityfocus.com/bid/35308 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://osvdb.org/54974 osvdb.org
- http://secunia.com/advisories/35379 Vendor Advisory
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35260 Exploit, Patch
- http://www.securityfocus.com/bid/35308 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory