Описание
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Font Importer" component. It allows remote attackers to cause a denial of service (memory corruption) or obtain sensitive information from process memory via a crafted font.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.12.6 (исключая)
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.00324
Низкий
7.1 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-119
Связанные уязвимости
CVSS3: 7.1
github
больше 3 лет назад
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Font Importer" component. It allows remote attackers to cause a denial of service (memory corruption) or obtain sensitive information from process memory via a crafted font.
EPSS
Процентиль: 55%
0.00324
Низкий
7.1 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-119