2009-07-22 20:30:00 2009-09-16 07:32:37

Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
IBM Rhapsody Design Manager 4.0.2 IBM Rhapsody Design Manager 4.0.4 IBM Rhapsody Design Manager 4.0.1 IBM Rhapsody Design Manager 4.0.0 IBM Rational Test Workbench 8.0.1.1 IBM Rhapsody Design Manager 4.0.3 IBM SAN Volume Controller software 6.1.0.7 IBM SAN Volume Controller software 6.4.1.2 IBM SAN Volume Controller software 6.4.1.5 IBM SAN Volume Controller software 6.4.0.4 IBM Sametime 9.0.0.1 Mozilla Firefox 0.9 rc (not an official CPE) IBM SAN Volume Controller software 6.4.1.3 IBM Sametime 9.0.0.0 IBM SAN Volume Controller software 6.2.0.1 IBM SAN Volume Controller software 6.3.0.2 IBM SAN Volume Controller software 6.4.1.1 IBM SAN Volume Controller software 6.1.0.8 IBM SAN Volume Controller software 6.1.0.9 IBM Rational Test Virtualization Server 8.7.0 IBM SAN Volume Controller software 6.4.0.3 IBM SAN Volume Controller software 6.1.0.5 IBM SAN Volume Controller software 6.2.0.0 IBM SAN Volume Controller software 6.3.0.4 IBM SAN Volume Controller software 6.3.0.3 IBM SAN Volume Controller software 6.4.1.4 IBM Rational Test Workbench 8.5.1 IBM Rational Test Workbench 8.0.0.2 IBM SAN Volume Controller software 6.3.0.1 IBM Rational Test Workbench 8.0.0.1 IBM Rational Test Virtualization Server 8.6.0.2 IBM Rational Test Workbench 8.0.0.3 IBM Rational Test Workbench 8.6.0.3 IBM Rational Test Workbench 8.5.1.4 IBM Rational Test Workbench 8.7.0 IBM SAN Volume Controller software 6.1.0.4 IBM SAN Volume Controller software 6.4.1.6 IBM Rational Test Workbench 8.5.1.2 IBM Rhapsody Design Manager 4.0.6 IBM Rational Test Workbench 8.5.1.3 IBM Rhapsody Design Manager 3.0.0.1 Mozilla Firefox 2.0.0.21 (not an official CPE) IBM Rational Testmanager 7.0.1.1 IBM Rhapsody Design Manager 4.0.5 IBM Rhapsody Design Manager 3.0.1 IBM Rational Test Workbench 8.7.0.1 IBM Rhapsody Design Manager 4.0.7 IBM Rhapsody Design Manager 3.0.0 IBM Rational Testmanager 2.1.1063 IBM SAN Volume Controller software 6.1.0.6 IBM Rational Test Virtualization Server 8.5.1.1 IBM SAN Volume Controller software 6.2.0.2 IBM SAN Volume Controller software 6.2.0.3 Mozilla Firefox 1.0.6 Linux (not an official CPE) IBM Rational Test Workbench 8.0.1.2 IBM Rational Test Workbench 8.0.1.5 IBM Rational Test Workbench 8.0.1.4 IBM Rational Test Workbench 8.5.0.1 IBM Rational Test Workbench 8.5.0 Mozilla Firefox 3.0 Beta2 (not an official CPE) IBM Rational Test Workbench 8.5.0.3 IBM Rational Test Workbench 8.5.0.2 IBM Rational Test Workbench 8.0.0.4 Mozilla Firefox 2.0 Beta 1 (not an official CPE) IBM Rational Test Virtualization Server 8.5.1.4 IBM Rational Test Virtualization Server 8.6.0.3 IBM SameTime Meeting Server 8.5.1 IBM Rational Test Virtualization Server 8.6.0.1 Mozilla Firefox 2.0 Rc2 (not an official CPE) IBM Rational Test Workbench 8.0.0 Mozilla Firefox 3.0 Beta5 (not an official CPE) Mozilla Firefox 2.0 Rc3 (not an official CPE) IBM Rhapsody Design Manager 5.0 IBM Rational Test Virtualization Server 8.7.0.1 Mozilla Firefox 2.0 Beta1 (not an official CPE) IBM Rational Test Workbench 8.5.1.1 IBM SAN Volume Controller IBM SAN Volume Controller software 6.1.0.10 IBM SAN Volume Controller software 6.1.0.1 IBM Rational Test Virtualization Server 8.5.0.3 IBM SAN Volume Controller software 6.1.0.3 Mozilla Firefox 3.0 Alpha (not an official CPE) IBM Rational Test Virtualization Server 8.5.1.3 IBM Rational Test Workbench 8.0.1 IBM Sametime Proxy Server and Web Client 9.0.0.1 IBM Sametime Proxy Server and Web Client 9.0.0.0 IBM Rational Test Virtualization Server 8.6.0 IBM SAN Volume Controller software 6.1.0.0 IBM Rational Test Virtualization Server 8.5.1.2 IBM Rational Test Workbench 8.6.0 IBM Rational Test Workbench 8.6.0.1 IBM SAN Volume Controller software 6.1.0.2 IBM Rational Test Workbench 8.0.1.3 IBM Rational Test Workbench 8.6.0.2 IBM Rational Test Virtualization Server 8.5.1