ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://support.apple.com/kb/HT4334

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.apple.com/kb/HT4276

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.vupen.com/english/advisories/2011/0216

Resource:

vdb-entry

x_refsource_VUPEN

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0177.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securityfocus.com/bid/42020

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://support.apple.com/kb/HT4456

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.vupen.com/english/advisories/2010/2722	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43068	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
http://support.apple.com/kb/HT4334	x_refsource_CONFIRM x_transferred
http://support.apple.com/kb/HT4276	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-1006-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://secunia.com/advisories/41856	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2011/0212	vdb-entry x_refsource_VUPEN x_transferred
http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766	vdb-entry signature x_refsource_OVAL x_transferred
http://www.vupen.com/english/advisories/2011/0216	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43086	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/42314	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0177.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2011/0552	vdb-entry x_refsource_VUPEN x_transferred
http://www.securityfocus.com/bid/42020	vdb-entry x_refsource_BID x_transferred
http://support.apple.com/kb/HT4456	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://support.apple.com/kb/HT4334

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://support.apple.com/kb/HT4276

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0216

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0177.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securityfocus.com/bid/42020

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://support.apple.com/kb/HT4456

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:30 Jul, 2010 | 20:30

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions up to 5.0(inclusive)

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*

>>safari>>4.0

cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*

>>safari>>4.0.0b

cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

>>safari>>4.0.1

cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*

>>safari>>4.0.2

cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*

>>safari>>4.0.3

cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*

>>safari>>4.0.4

cpe:2.3:a:apple:safari:4.0.5:*:*:*:*:*:*:*

>>safari>>4.0.5

cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*

>>webkit>>*

cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

>>mac_os_x>>10.5

cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*

>>mac_os_x>>10.5.0

cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*

>>mac_os_x>>10.5.1

cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*

>>mac_os_x>>10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*

>>mac_os_x>>10.5.3

cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*

>>mac_os_x>>10.5.4

cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*

>>mac_os_x>>10.5.5

cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*

>>mac_os_x>>10.5.6

cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*

>>mac_os_x>>10.5.7

cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*

>>mac_os_x>>10.5.8

cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*

>>mac_os_x>>10.6.0

cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*

>>mac_os_x>>10.6.1

cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*

>>mac_os_x>>10.6.2

cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*

>>mac_os_x>>10.6.3

cpe:2.3:o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*

>>mac_os_x>>10.6.4

cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5

cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.0

cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.1

cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.2

cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.3

cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.4

cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.5

cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.6

cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.7

cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.8

cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.0

cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.1

cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.2

cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.3

cpe:2.3:o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.4

cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*

>>windows_7>>*

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

>>windows_xp>>*

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions up to 4.1(inclusive)

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*

>>safari>>4.0

cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*

>>safari>>4.0.0b

cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

>>safari>>4.0.1

cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*

>>safari>>4.0.2

cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*

>>safari>>4.0.3

cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*

>>safari>>4.0.4

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html	product-security@apple.com	Patch Vendor Advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html	product-security@apple.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html	product-security@apple.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	product-security@apple.com	N/A
http://secunia.com/advisories/41856	product-security@apple.com	N/A
http://secunia.com/advisories/42314	product-security@apple.com	N/A
http://secunia.com/advisories/43068	product-security@apple.com	N/A
http://secunia.com/advisories/43086	product-security@apple.com	N/A
http://support.apple.com/kb/HT4276	product-security@apple.com	Vendor Advisory
http://support.apple.com/kb/HT4334	product-security@apple.com	N/A
http://support.apple.com/kb/HT4456	product-security@apple.com	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	product-security@apple.com	N/A
http://www.redhat.com/support/errata/RHSA-2011-0177.html	product-security@apple.com	N/A
http://www.securityfocus.com/bid/42020	product-security@apple.com	Patch
http://www.ubuntu.com/usn/USN-1006-1	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2010/2722	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0212	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0216	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0552	product-security@apple.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/41856	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/42314	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43068	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43086	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4276	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://support.apple.com/kb/HT4334	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4456	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2011-0177.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/42020	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.ubuntu.com/usn/USN-1006-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/2722	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0212	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0216	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0552	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html

Source: product-security@apple.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4276

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4334

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4456

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0177.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/42020

Source: product-security@apple.com

Resource:

Patch

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0216

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4276

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4334

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4456

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0177.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/42020

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0216

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

7882Records found

CVE-2011-3249

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.50% / 87.32%

7 Day CHG~0.00%

Published-28 Oct, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FLC encoding.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3252

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.66% / 89.07%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Advanced Audio Coding (AAC) stream.

Product-windows_7 windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-1302

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-40.13% / 97.23%

7 Day CHG~0.00%

Published-13 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."

Product-excel excel_viewer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3251

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.11% / 83.75%

7 Day CHG~0.00%

Published-28 Oct, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3219

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.66% / 85.45%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

Product-windows_7 windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2099

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-8.99% / 92.42%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2098.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2873

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.65%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2871

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.65%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2098

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-7.27% / 91.45%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2867

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.65%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2097

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-10.91% / 93.22%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2094 and CVE-2011-2095.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1403

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-11.05% / 93.27%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document containing XML that triggers a parsing error, related to ProcessInstruction.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2833

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.78% / 82.35%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2426

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-11.68% / 93.51%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2094

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-23.46% / 95.84%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2003

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-49.40% / 97.71%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."

Product-windows_7 windows_xp windows_server_2008 windows_server_2003 windows_2003_server windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2103

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-10.81% / 93.19%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 8.x before 8.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2868

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.65%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2427

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.42% / 84.79%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2105

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-9.82% / 92.79%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted font data.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2095

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-23.46% / 95.84%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2096

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-13.83% / 94.12%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2869

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.65%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2872

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.65%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2424

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-16.13% / 94.63%

7 Day CHG+2.37%

Published-15 Aug, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1462

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1453

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1988

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-58.63% / 98.16%

7 Day CHG~0.00%

Published-15 Sep, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Heap Corruption Vulnerability."

Product-office excel_viewer excel open_xml_file_format_converter office_compatibility_pack n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1783

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-5.36% / 89.86%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1275

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.12% / 97.75%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Heap Overwrite Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1278

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.08% / 97.75%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."

Product-office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1276

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.77% / 97.78%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel spreadsheet, related to improper validation of record information, aka "Excel Buffer Overrun Vulnerability."

Product-office excel_viewer excel open_xml_file_format_converter office_compatibility_pack n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0006

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-73.90% / 98.78%

7 Day CHG~0.00%

Published-14 Feb, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.

Product-windows_98se windows_media_player windows_xp windows_2000 windows_98 windows_me windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0007

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-59.66% / 98.20%

7 Day CHG~0.00%

Published-11 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.

Product-office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0005

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-75.52% / 98.86%

7 Day CHG~0.00%

Published-14 Feb, 2006 | 19:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

Product-windows_server_2003 windows_2000_advanced_server windows_xp windows_server_2000 windows-nt windows_2000 windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0001

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-73.18% / 98.75%

7 Day CHG~0.00%

Published-12 Sep, 2006 | 23:00

Updated-03 Apr, 2025 | 01:03

Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.

Product-office publisher n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1243

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-43.73% / 97.43%

7 Day CHG+3.26%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."

Product-windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1260

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-82.06% / 99.18%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."

Product-windows_7 windows_xp windows_server_2008 windows_server_2003 windows_2003_server windows_vista internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1270

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-34.37% / 96.88%

7 Day CHG~0.00%

Published-13 May, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability."

Product-powerpoint n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1277

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.20% / 97.76%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1279

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-43.53% / 97.42%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1273

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.08% / 97.75%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Improper Record Parsing Vulnerability."

Product-office excel_viewer excel open_xml_file_format_converter office_compatibility_pack n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0025

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-71.52% / 98.69%

7 Day CHG~0.00%

Published-13 Jun, 2006 | 19:00

Updated-03 Apr, 2025 | 01:03

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.

Product-windows_media_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1797

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.33%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Vendor-chromium_project n/a Microsoft Corporation Apple Inc.

Product-windows_7 chromium webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1288

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1457

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0978

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-75.92% / 98.88%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka "Excel Array Indexing Vulnerability."

Product-office_compatibility_pack office excel excel_viewer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0232

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0620

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-5.70% / 90.21%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0621, and CVE-2011-0622.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0105

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-89.42% / 99.53%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."