CVE-2015-3679

Vulnerability

Apple Type Services (ATS) in Apple OS X before 10.10.4 contains a memory corruption vulnerability that can be triggered by processing a crafted font file. This affects OS X Mavericks v10.9.5 and OS X Yosemite v10.10 to v10.10.3 [1]. The issue is distinct from related font-handling flaws CVE-2015-3680, CVE-2015-3681, and CVE-2015-3682.

Exploitation

An attacker can exploit this vulnerability by delivering a specially crafted font file to the target system. No authentication is required if the attacker can entice a user to open a document or web page that renders the malicious font. The code path is reachable through any application that uses ATS for font processing.

Impact

Successful exploitation leads to memory corruption, which an attacker can leverage to execute arbitrary code in the context of the affected process or cause a denial of service. This could result in full system compromise or application crash.

Mitigation

Apple addressed this vulnerability in OS X Yosemite v10.10.4 and Security Update 2015-005, released on June 30, 2015 [1]. Users should update to the latest available version. No workarounds are disclosed in the available references.