Denial of Service Vulnerability in YoruFukurou (NightOwl) before 2.85

CVE-2016-4852 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

YoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service (application crash) via a crafted emoji character sequence.

Learn more about our Api Penetration Testing.