Vulnerability in Apple Mac Os X
CVE-2014-1261
Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Unicode font.
EPSS: 0.026 (83.7th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.9
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)