ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://trac.webkit.org/changeset/52833

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=33231

Resource:

x_refsource_CONFIRM

Hyperlink: http://securitytracker.com/id?1023506

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Resource:

x_refsource_CONFIRM

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=28566

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079

Resource:

vdb-entry

signature

x_refsource_OVAL

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/43068	third-party-advisory x_refsource_SECUNIA x_transferred
http://trac.webkit.org/changeset/52833	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0212	vdb-entry x_refsource_VUPEN x_transferred
https://bugs.webkit.org/show_bug.cgi?id=33231	x_refsource_CONFIRM x_transferred
http://securitytracker.com/id?1023506	vdb-entry x_refsource_SECTRACK x_transferred
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	x_refsource_CONFIRM x_transferred
http://code.google.com/p/chromium/issues/detail?id=28566	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079	vdb-entry signature x_refsource_OVAL x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html

Resource:

x_refsource_CONFIRM

x_transferred

cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://trac.webkit.org/changeset/52833

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=33231

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://securitytracker.com/id?1023506

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=28566

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:18 Feb, 2010 | 18:00

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Apple Inc.

>>webkit>>Versions up to r53524(inclusive)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 4.0.249.78(inclusive)

cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*

>>chrome>>0.2.149.27

cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*

>>chrome>>0.2.149.29

cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*

>>chrome>>0.2.149.30

cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*

>>chrome>>0.2.152.1

cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*

>>chrome>>0.2.153.1

cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*

>>chrome>>0.3.154.0

cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*

>>chrome>>0.3.154.3

cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*

>>chrome>>0.4.154.18

cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*

>>chrome>>0.4.154.22

cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*

>>chrome>>0.4.154.31

cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*

>>chrome>>0.4.154.33

cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*

>>chrome>>1.0.154.36

cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*

>>chrome>>1.0.154.39

cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*

>>chrome>>1.0.154.42

cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*

>>chrome>>1.0.154.43

cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*

>>chrome>>1.0.154.46

cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*

>>chrome>>1.0.154.48

cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*

>>chrome>>1.0.154.52

cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*

>>chrome>>1.0.154.53

cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*

>>chrome>>1.0.154.59

cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*

>>chrome>>1.0.154.65

cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*

>>chrome>>2.0.156.1

cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*

>>chrome>>2.0.157.0

cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*

>>chrome>>2.0.157.2

cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*

>>chrome>>2.0.158.0

cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*

>>chrome>>2.0.159.0

cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*

>>chrome>>2.0.169.0

cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*

>>chrome>>2.0.169.1

cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*

>>chrome>>2.0.170.0

cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*

>>chrome>>2.0.172

cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*

>>chrome>>2.0.172.2

cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*

>>chrome>>2.0.172.8

cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*

>>chrome>>2.0.172.27

cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*

>>chrome>>2.0.172.28

cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*

>>chrome>>2.0.172.30

cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*

>>chrome>>2.0.172.31

cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*

>>chrome>>2.0.172.33

cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*

>>chrome>>2.0.172.37

cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*

>>chrome>>2.0.172.38

cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*

>>chrome>>3.0.182.2

cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*

>>chrome>>3.0.190.2

cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*

>>chrome>>3.0.193.2

cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*

>>chrome>>3.0.195.21

cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*

>>chrome>>3.0.195.24

cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*

>>chrome>>3.0.195.32

cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*

>>chrome>>3.0.195.33

cpe:2.3:a:google:chrome:4.0.244.0:*:*:*:*:*:*:*

>>chrome>>4.0.244.0

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=28566	cve@mitre.org	N/A
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html	cve@mitre.org	Patch
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	cve@mitre.org	N/A
http://secunia.com/advisories/43068	cve@mitre.org	N/A
http://securitytracker.com/id?1023506	cve@mitre.org	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	cve@mitre.org	Vendor Advisory
http://trac.webkit.org/changeset/52833	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2011/0212	cve@mitre.org	N/A
https://bugs.webkit.org/show_bug.cgi?id=33231	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079	cve@mitre.org	N/A
http://code.google.com/p/chromium/issues/detail?id=28566	af854a3a-2127-422b-91ae-364da2661108	N/A
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html	af854a3a-2127-422b-91ae-364da2661108	Patch
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43068	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1023506	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://trac.webkit.org/changeset/52833	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0212	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.webkit.org/show_bug.cgi?id=33231	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=28566

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: cve@mitre.org

Resource: N/A

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://securitytracker.com/id?1023506

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://trac.webkit.org/changeset/52833

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=33231

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=28566

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://securitytracker.com/id?1023506

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://trac.webkit.org/changeset/52833

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=33231

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2640Records found

CVE-2010-1399

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.22% / 88.31%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during a selection change on a form input element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1290

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-2.09% / 83.34%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1291.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows shockwave_player macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6974

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.08% / 76.98%

7 Day CHG~0.00%

Published-23 Oct, 2015 | 21:00

Updated-12 Apr, 2025 | 10:46

IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-watchos iphone_os mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1297

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-93.62% / 99.83%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 18:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Vendor-n/a openSUSE Microsoft Corporation Adobe Inc.Apple Inc.SUSE

Product-air windows opensuse acrobat linux_enterprise flash_player mac_os_x n/a Flash Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1241

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-26.20% / 96.10%

7 Day CHG+7.62%

Published-05 Apr, 2010 | 15:15

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1288

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-7.68% / 91.55%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1400

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-9.75% / 92.64%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving caption elements.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1383

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-0.64% / 69.50%

7 Day CHG-0.19%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue.

Product-windows_7 cfnetwork windows_xp windows_vista safari n/a

CVE-2010-1789

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-14.35% / 94.16%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a JavaScript string object.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-21051

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-2.42% / 84.51%

7 Day CHG~0.00%

Published-11 Feb, 2021 | 20:09

Updated-23 Apr, 2025 | 19:46

Adobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution Vulnerability

Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted javascript file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows photoshop macos Photoshop

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2015-5784

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-28.24% / 96.33%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CVE-2014-4389

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.75% / 81.77%

7 Day CHG~0.00%

Published-18 Sep, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments.

Vendor-n/a Apple Inc.

Product-iphone_os mac_os_x tvos n/a

CVE-2014-4381

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.74% / 81.73%

7 Day CHG~0.00%

Published-18 Sep, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code as root via a crafted application.

Vendor-n/a Apple Inc.

Product-iphone_os mac_os_x tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5754

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-21.39% / 95.48%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2010-0527

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.94% / 82.69%

7 Day CHG~0.00%

Published-31 Mar, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.

Product-windows_7 windows_xp quicktime windows_vista n/a

CVE-2010-0191

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-18.13% / 94.93%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0053

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-6.49% / 90.72%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the run-in Cascading Style Sheets (CSS) display property.

Vendor-n/a Apple Inc.

Product-safari n/a

CVE-2010-0128

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-9.3||HIGH

EPSS-8.22% / 91.88%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-director shockwave_player windows macos n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-5783

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-0.83% / 73.62%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3770.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0037

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-4.73% / 88.98%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted DNG image.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a mac_os_x_server

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5867

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.08% / 76.98%

7 Day CHG~0.00%

Published-18 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-iphone_os watchos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0243

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-62.23% / 98.30%

7 Day CHG~0.00%

Published-10 Feb, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."

Product-office macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6606

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.3||HIGH

EPSS-0.89% / 74.59%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786.

Vendor-n/a Google LLC

Product-android n/a

CVE-2010-0045

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.73% / 85.39%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.

Product-windows safari n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-0655

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-13.86% / 94.05%

7 Day CHG~0.00%

Published-18 Feb, 2010 | 17:19

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-0054

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.54% / 92.04%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-safari n/a

CVE-2015-5844

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.47% / 80.11%

7 Day CHG~0.00%

Published-18 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-5845 and CVE-2015-5846.

Vendor-n/a Apple Inc.

Product-iphone_os watchos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0645

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-8.55% / 92.04%

7 Day CHG~0.00%

Published-18 Feb, 2010 | 17:19

Updated-11 Apr, 2025 | 00:51

Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-0658

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-3.90% / 87.81%

7 Day CHG~0.00%

Published-18 Feb, 2010 | 17:19

Updated-11 Apr, 2025 | 00:51

Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service (memory corruption and application crash) via vectors involving CANVAS elements.

Vendor-n/a Google LLC Microsoft Corporation

Product-windows chrome n/a

CVE-2015-6620

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.3||HIGH

EPSS-12.57% / 93.70%

7 Day CHG~0.00%

Published-08 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bugs 24123723 and 24445127.

Vendor-n/a Google LLC

Product-android n/a

CVE-2010-0203

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-26.98% / 96.19%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0202.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0196

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-25.69% / 96.03%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0192 and CVE-2010-0193.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CVE-2010-0528

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.16% / 86.40%

7 Day CHG~0.00%

Published-31 Mar, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0529

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.16% / 88.23%

7 Day CHG~0.00%

Published-31 Mar, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6596

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.3||HIGH

EPSS-0.21% / 43.12%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different vulnerability than CVE-2015-7717.

Vendor-n/a Google LLC

Product-android n/a

CVE-2010-0050

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-45.13% / 97.51%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

Vendor-n/a Canonical Ltd.Fedora Project openSUSE Apple Inc.

Product-ubuntu_linux fedora opensuse iphone_os safari n/a

CWE ID-CWE-416

Use After Free

CVE-2016-3910

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.99%

7 Day CHG~0.00%

Published-10 Oct, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30148546.

Vendor-n/a Google LLC

Product-android n/a

CVE-2010-0197

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-9.51% / 92.53%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0201, and CVE-2010-0204.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0036

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.56% / 80.77%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 audio file.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a mac_os_x_server

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0201

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-9.51% / 92.53%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7658

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.83% / 90.19%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionInstanceOf arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2010-0040

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-19.78% / 95.22%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with a crafted color profile that triggers a heap-based buffer overflow.

Product-windows safari n/a

CVE-2010-1283

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.61% / 92.06%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows shockwave_player macos n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0194

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-9.51% / 92.53%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5876

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.64% / 81.17%

7 Day CHG~0.00%

Published-18 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-watchos iphone_os mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-4404

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-53.33% / 97.89%

7 Day CHG~0.00%

Published-18 Sep, 2014 | 10:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-08-10||Apply updates per vendor instructions.

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.

Vendor-n/a Apple Inc.

Product-iphone_os mac_os_x tvos n/a OS X

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0202

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-12.77% / 93.75%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0316

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.80% / 85.56%

7 Day CHG~0.00%

Published-15 Jan, 2010 | 17:00

Updated-16 Sep, 2024 | 19:55

Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file.

Vendor-n/a Google LLC

Product-google_sketchup n/a

CWE ID-CWE-189

Not Available

CVE-2010-0280

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-3.89% / 87.81%

7 Day CHG~0.00%

Published-15 Jan, 2010 | 17:00

Updated-07 Aug, 2024 | 00:45

Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.

Vendor-jan_eric_krprianidis n/a Google LLC

Product-lib3ds google_sketchup n/a

CWE ID-CWE-189

Not Available

CVE-2010-0198

Matching Score-8

Matching Score-8