Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Coregraphics | — | Apply OS X security update 2009-005 | Dec 16, 2011 | Jul 22, 2009 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 4.0.3 | Jan 5, 2012 | Jul 22, 2009 |
| Gentoo Linux | — | Upgrade x11-libs/pango. | Oct 30, 2017 | Jul 22, 2009 |
| Mfsa2009 36 | — | Upgrade to Mozilla Firefox version 3.5Upgrade to Mozilla Firefox version 3.0.12 | Jun 14, 2012 | Jul 22, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub