CVE-2016-4667
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.12.1, involving the 'ATS' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted font.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to unauthorized access to systems or application crashes.
Recommendation
It is recommended to update macOS systems to version 10.12.1 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in ATS
See all- CVE-2017-13820High
An issue was discovered in certain Apple products, including macOS before 10.13.1, involving the 'ATS' component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted font.
- CVE-2016-4674High
An issue was discovered in certain Apple products, including macOS before 10.12.1, involving the 'ATS' component. It allows local users to gain privileges or cause a denial of service via unspecified vectors.
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.