CVE-2016-1797
HighSummary
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context.
Risk Assessment
Attackers can exploit this vulnerability to execute malicious code, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update the system to version 10.11.5 or later to mitigate this vulnerability.
Other vulnerabilities in Apple Type Services (ATS)
See all- CVE-2016-4779High
Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
- CVE-2015-1135High
A vulnerability in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1134High
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors. This is a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135.
- CVE-2015-1133High
A vulnerability in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1132High
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1131High
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors.
Original NVD description (English source)
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app.