Apple Mac OS X ATSServer CFF 'CharStrings' Index Sign Mismatch Remote Code Execution Vulnerability
BID:44729
Info
Apple Mac OS X ATSServer CFF 'CharStrings' Index Sign Mismatch Remote Code Execution Vulnerability
| Bugtraq ID: | 44729 |
| Class: | Design Error |
| CVE: |
CVE-2010-4010 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 08 2010 12:00AM |
| Updated: | Nov 19 2010 08:06PM |
| Credit: | Anibal Sacco and Matias Eissler of Core Security Technologies. |
| Vulnerable: |
Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5 Apple Mac OS X 10.5 |
| Not Vulnerable: |
Apple Mac OS X Server 10.6 Apple Mac OS X 10.6 |
Discussion
Apple Mac OS X ATSServer CFF 'CharStrings' Index Sign Mismatch Remote Code Execution Vulnerability
Apple Mac OS X is prone to a remote code-execution vulnerability that exists in the ATSServer component.
An attacker can exploit this issue by enticing an unsuspecting victim to do one of the following:
1. Create a thumbnail of an image file.
2. Open an image using the Preview application.
3. View a file that is hosted on a webserver.
4. View an embedded file contained in an email.
Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue only affects Apple Mac OS X 10.5.
NOTE: This issue may be related to a vulnerability discussed in BID 42241 (FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities).
Apple Mac OS X is prone to a remote code-execution vulnerability that exists in the ATSServer component.
An attacker can exploit this issue by enticing an unsuspecting victim to do one of the following:
1. Create a thumbnail of an image file.
2. Open an image using the Preview application.
3. View a file that is hosted on a webserver.
4. View an embedded file contained in an email.
Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue only affects Apple Mac OS X 10.5.
NOTE: This issue may be related to a vulnerability discussed in BID 42241 (FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities).
Exploit / POC
Apple Mac OS X ATSServer CFF 'CharStrings' Index Sign Mismatch Remote Code Execution Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple Mac OS X ATSServer CFF 'CharStrings' Index Sign Mismatch Remote Code Execution Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Apple Mac OS X Server 10.5.8
Apple Mac OS X 10.5.8
Solution:
Vendor updates are available. Please see the references for more information.
Apple Mac OS X Server 10.5.8
-
Apple SecUpdSrvr2010-007.dmg
For Mac OS X Server v10.5.8
http://www.apple.com/support/downloads/
Apple Mac OS X 10.5.8
-
Apple SecUpd2010-007.dmg
For Mac OS X v10.5.8
http://www.apple.com/support/downloads/
References
Apple Mac OS X ATSServer CFF 'CharStrings' Index Sign Mismatch Remote Code Execution Vulnerability
References:
References:
- [CORE-2010-0825] Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch (Core Security Technologies)
- Mac OS X Homepage (Apple)