CVE-2016-4779
HighSummary
Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the system or disrupt its operation, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update OS X to version 10.12 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Apple Type Services (ATS)
See all- CVE-2016-1797High
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context.
- CVE-2015-1135High
A vulnerability in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1134High
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors. This is a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135.
- CVE-2015-1133High
A vulnerability in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1132High
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1131High
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors.
Original NVD description (English source)
Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.