Vulnerability Found in Mac OS X 10.5

Core Security has discovered a vulnerability in Mac OS X 10.5 which could be used by a remote attacker to execute arbitrary code by getting the user to download a PDF document containing a embedded malicious CFF font. The advisory shows a communication timeline with Apple as well.

Full advisory: Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch