CVE-2011-0174

Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font.

• CWE-119

• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT4581Patch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT4581Patch, Vendor Advisory

Published

Mar 23, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0168WebKit, as used in Apple iTunes before 10.2 on Windows, allo…
• CVE-2011-0169WebKit in Apple Safari before 5.0.4, when the Web Inspector …
• CVE-2011-0170Heap-based buffer overflow in ImageIO in CoreGraphics in App…
• CVE-2011-0171Rejected reason: This candidate is unused by its CNA.
• CVE-2011-0172AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote a…
• CVE-2011-0173Multiple format string vulnerabilities in AppleScript in App…
• CVE-2011-0175Multiple buffer overflows in Apple Type Services (ATS) in Ap…
• CVE-2011-0176Multiple buffer overflows in Apple Type Services (ATS) in Ap…
• CVE-2011-0177Multiple buffer overflows in Apple Type Services (ATS) in Ap…
• CVE-2011-0178The FSFindFolder API in CarbonCore in Apple Mac OS X before …
• CVE-2011-0179CoreText in Apple Mac OS X before 10.6.7 allows remote attac…
• CVE-2011-0180Integer overflow in HFS in Apple Mac OS X before 10.6.7 allo…