CVE-2012-3716: Buffer Overflow
Published Sep 20, 2012
·Updated
CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write or read) via a crafted text glyph.
Affected Software
10 affected components
Apple iOS and macOS=10.7.0
Apple iOS and macOS=10.7.1
Apple iOS and macOS=10.7.2
Apple iOS and macOS=10.7.3
Apple iOS and macOS=10.7.4
Apple Mac OS X Server=10.7.0
Apple Mac OS X Server=10.7.1
Apple Mac OS X Server=10.7.2
Apple Mac OS X Server=10.7.3
Apple Mac OS X Server=10.7.4
Event History
Sep 20, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3716?
CVE-2012-3716 is considered to be of high severity due to its potential to allow remote code execution or cause denial of service.
2
How do I fix CVE-2012-3716?
To mitigate CVE-2012-3716, it is recommended to update to Mac OS X 10.7.5 or later.
3
What versions of Mac OS X are affected by CVE-2012-3716?
CVE-2012-3716 affects Apple Mac OS X versions 10.7.0 through 10.7.4.
4
Can CVE-2012-3716 be exploited remotely?
Yes, CVE-2012-3716 can be exploited remotely by attackers using specially crafted text glyphs.
5
What are the consequences of CVE-2012-3716 being exploited?
Exploitation of CVE-2012-3716 can lead to arbitrary code execution or a denial of service on the affected systems.