First published: Thu Nov 15 2007(Updated: )
CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | >=10.4<=10.4.10 | |
macOS Yosemite | =10.4.3 | |
macOS Yosemite | =10.4.1 | |
macOS Yosemite | =10.4.10 | |
macOS Yosemite | =10.4.9 | |
macOS Yosemite | =10.4.7 | |
macOS Yosemite | =10.4.4 | |
macOS Yosemite | =10.4.0 | |
macOS Yosemite | =10.4 | |
macOS Yosemite | =10.4.6 | |
macOS Yosemite | =10.4.5 | |
macOS Yosemite | =10.4.8 | |
macOS Yosemite | =10.4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-4682 is classified as a significant vulnerability that could lead to denial of service or potentially allow arbitrary code execution.
To mitigate CVE-2007-4682, users should update their Mac OS X software to the latest version available, above 10.4.10.
CVE-2007-4682 affects all versions of Mac OS X from 10.4.0 through 10.4.10.
CVE-2007-4682 allows attackers to cause a denial of service by crashing applications through crafted text content.
Yes, CVE-2007-4682 can be exploited remotely if a user interacts with the malicious text content.