CVE-2011-3446

Apple Mac OS X < 10.7.3 - Remote Code Execution via Crafted Font in Font Book

Title source: llm
STIX 2.1

Description

Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font that is accessed by Font Book.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5130

Scores

EPSS 0.0268
EPSS Percentile 84.2%

Details

Status published
Products (6)
apple/mac_os_x 10.7.0
apple/mac_os_x 10.7.1
apple/mac_os_x < 10.7.2
apple/mac_os_x_server 10.7.0
apple/mac_os_x_server 10.7.1
apple/mac_os_x_server < 10.7.2
Published Feb 02, 2012
Tracked Since Feb 18, 2026