First published: Wed Aug 25 2010(Updated: )
Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Type Services | ||
Apple iOS and macOS | =10.5.8 | |
Apple iOS and macOS | =10.6.4 | |
Apple iOS and macOS | =10.5.8 | |
Apple iOS and macOS | =10.6.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-1808 is considered a critical vulnerability due to its potential to allow arbitrary code execution.
To fix CVE-2010-1808, users should update their Apple Mac OS X systems to the latest available version.
CVE-2010-1808 affects Apple Mac OS X versions 10.5.8 and 10.6.4, as well as the corresponding server versions.
Yes, CVE-2010-1808 can lead to a denial of service by crashing applications when processing crafted font files.
Apple is responsible for addressing CVE-2010-1808 and has released updates to mitigate the vulnerability.