CVE

Id
39140  
CVE No.
CVE-2009-1705  
Status
Candidate  
Description
CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430182 39140 CVE-2009-1705 CONFIRM:http://support.apple.com/kb/HT3613  View
430183 39140 CVE-2009-1705 APPLE:APPLE-SA-2009-06-08-1  View
430184 39140 CVE-2009-1705 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
430185 39140 CVE-2009-1705 BID:35260  View
430186 39140 CVE-2009-1705 URL:http://www.securityfocus.com/bid/35260  View
430187 39140 CVE-2009-1705 BID:35308  View
430188 39140 CVE-2009-1705 URL:http://www.securityfocus.com/bid/35308  View
430189 39140 CVE-2009-1705 OSVDB:54974  View
430190 39140 CVE-2009-1705 URL:http://osvdb.org/54974  View
430191 39140 CVE-2009-1705 SECUNIA:35379  View
430192 39140 CVE-2009-1705 URL:http://secunia.com/advisories/35379  View
430193 39140 CVE-2009-1705 VUPEN:ADV-2009-1522  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40753 JVNDB-2009-001759 Apple Safari の WebKit におけるガベージコレクション実装に関する任意のコードを実行される脆弱性 Apple Safari の WebKit 内にある WebCore の持つガベージコレクション実装には、SVG アニメーション要素の処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1709 39140 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001759.html  View