Buffer overflow in Apple Iphone OS
CVE-2011-3439
FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.
Vulnerability class: Buffer Overflow
EPSS: 0.053 (91.8th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os
- Suse Linux_enterprise_desktop — versions 11
- Suse Linux_enterprise_server — versions 11
- Suse Linux_enterprise_software_development_kit — versions 11
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vendor-advisory, Broken Link, x_refsource_SUSE)
- product-security@apple.com (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
- product-security@apple.com (vendor-advisory, Broken Link, x_refsource_SUSE)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- product-security@apple.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)