CVE-2017-13820
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.13.1, involving the 'ATS' component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted font.
Risk Assessment
Organizations may be exposed to sensitive data leakage or disruptions in system operations due to this vulnerability.
Recommendation
It is recommended to update macOS to version 10.13.1 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in ATS
See all- CVE-2016-4674High
An issue was discovered in certain Apple products, including macOS before 10.12.1, involving the 'ATS' component. It allows local users to gain privileges or cause a denial of service via unspecified vectors.
- CVE-2016-4667High
An issue was discovered in certain Apple products, including macOS before 10.12.1, involving the 'ATS' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted font.
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted font.