← Database

CVE-2009-1705

CRITICAL CVSS: 9.3 Published: 2009-06-10 Modified: 2026-06-16

Description

CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data.

Affected Platforms

Apple Safari

Weakness Type

CWE-189

References