ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://support.apple.com/kb/HT4334

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.apple.com/kb/HT4276

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.vupen.com/english/advisories/2011/0216

Resource:

vdb-entry

x_refsource_VUPEN

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0177.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securityfocus.com/bid/42020

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://support.apple.com/kb/HT4456

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.vupen.com/english/advisories/2010/2722	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43068	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
http://support.apple.com/kb/HT4334	x_refsource_CONFIRM x_transferred
http://support.apple.com/kb/HT4276	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-1006-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://secunia.com/advisories/41856	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2011/0212	vdb-entry x_refsource_VUPEN x_transferred
http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766	vdb-entry signature x_refsource_OVAL x_transferred
http://www.vupen.com/english/advisories/2011/0216	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43086	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/42314	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0177.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2011/0552	vdb-entry x_refsource_VUPEN x_transferred
http://www.securityfocus.com/bid/42020	vdb-entry x_refsource_BID x_transferred
http://support.apple.com/kb/HT4456	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://support.apple.com/kb/HT4334

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://support.apple.com/kb/HT4276

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0216

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0177.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securityfocus.com/bid/42020

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://support.apple.com/kb/HT4456

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:30 Jul, 2010 | 20:30

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions up to 5.0(inclusive)

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*

>>safari>>4.0

cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*

>>safari>>4.0.0b

cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

>>safari>>4.0.1

cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*

>>safari>>4.0.2

cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*

>>safari>>4.0.3

cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*

>>safari>>4.0.4

cpe:2.3:a:apple:safari:4.0.5:*:*:*:*:*:*:*

>>safari>>4.0.5

cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*

>>webkit>>*

cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

>>mac_os_x>>10.5

cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*

>>mac_os_x>>10.5.0

cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*

>>mac_os_x>>10.5.1

cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*

>>mac_os_x>>10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*

>>mac_os_x>>10.5.3

cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*

>>mac_os_x>>10.5.4

cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*

>>mac_os_x>>10.5.5

cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*

>>mac_os_x>>10.5.6

cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*

>>mac_os_x>>10.5.7

cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*

>>mac_os_x>>10.5.8

cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*

>>mac_os_x>>10.6.0

cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*

>>mac_os_x>>10.6.1

cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*

>>mac_os_x>>10.6.2

cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*

>>mac_os_x>>10.6.3

cpe:2.3:o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*

>>mac_os_x>>10.6.4

cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5

cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.0

cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.1

cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.2

cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.3

cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.4

cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.5

cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.6

cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.7

cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.8

cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.0

cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.1

cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.2

cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.3

cpe:2.3:o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.4

cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*

>>windows_7>>*

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

>>windows_xp>>*

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions up to 4.1(inclusive)

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*

>>safari>>4.0

cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*

>>safari>>4.0.0b

cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

>>safari>>4.0.1

cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*

>>safari>>4.0.2

cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*

>>safari>>4.0.3

cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*

>>safari>>4.0.4

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html	product-security@apple.com	Patch Vendor Advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html	product-security@apple.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html	product-security@apple.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	product-security@apple.com	N/A
http://secunia.com/advisories/41856	product-security@apple.com	N/A
http://secunia.com/advisories/42314	product-security@apple.com	N/A
http://secunia.com/advisories/43068	product-security@apple.com	N/A
http://secunia.com/advisories/43086	product-security@apple.com	N/A
http://support.apple.com/kb/HT4276	product-security@apple.com	Vendor Advisory
http://support.apple.com/kb/HT4334	product-security@apple.com	N/A
http://support.apple.com/kb/HT4456	product-security@apple.com	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	product-security@apple.com	N/A
http://www.redhat.com/support/errata/RHSA-2011-0177.html	product-security@apple.com	N/A
http://www.securityfocus.com/bid/42020	product-security@apple.com	Patch
http://www.ubuntu.com/usn/USN-1006-1	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2010/2722	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0212	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0216	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0552	product-security@apple.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/41856	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/42314	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43068	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43086	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4276	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://support.apple.com/kb/HT4334	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4456	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2011-0177.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/42020	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.ubuntu.com/usn/USN-1006-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/2722	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0212	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0216	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0552	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html

Source: product-security@apple.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4276

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4334

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4456

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0177.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/42020

Source: product-security@apple.com

Resource:

Patch

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0216

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4276

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4334

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4456

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0177.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/42020

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0216

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11766

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

7883Records found

CVE-2011-0225

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0104

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-76.89% / 98.92%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0246

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.32% / 86.98%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0241

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-7.06% / 91.30%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with CCITT Group 4 encoding.

Product-windows_7 imageio windows_xp windows_vista safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0222

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-33.33% / 96.80%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0010

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-49.82% / 97.73%

7 Day CHG~0.00%

Published-10 Jan, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.

Product-windows_me windows_98se windows_nt windows_xp windows_98 windows_2000 windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0191

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-18.92% / 95.15%

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.

Product-windows windows_7 windows_xp windows_vista itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0245

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.29% / 86.91%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pict file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0563

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-5.65% / 90.16%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0255

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0566

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-7.75% / 91.75%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0567 and CVE-2011-0603.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0247

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-7.90% / 91.83%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Multiple stack-based buffer overflows in Apple QuickTime before 7.7 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0237

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.04% / 83.50%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0235

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0170

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.01% / 91.91%

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image.

Product-windows windows_7 windows_xp windows_vista itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0606

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-15.80% / 94.57%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a crafted length value, a different vulnerability than CVE-2011-0563 and CVE-2011-0589.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0103

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-70.08% / 98.63%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka "Excel Memory Corruption Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0250

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.48% / 88.84%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSS atoms in a QuickTime movie file.

Product-windows_7 quicktime windows_xp windows_vista mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0249

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.48% / 88.84%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSC atoms in a QuickTime movie file.

Product-windows_7 quicktime windows_xp windows_vista mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0610

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-5.78% / 90.29%

7 Day CHG~0.00%

Published-03 May, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

The CoolType library in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0589

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-2.58% / 85.24%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0251

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.48% / 88.84%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSZ atoms in a QuickTime movie file.

Product-windows_7 quicktime windows_xp windows_vista mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0253

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.04% / 83.50%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0252

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.43% / 88.78%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STTS atoms in a QuickTime movie file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0240

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.04% / 83.50%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0248

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.67% / 85.48%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.

Product-windows_7 quicktime windows_xp windows_vista internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0233

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0603

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-9.98% / 92.87%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0221

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0223

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.04% / 83.50%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0234

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0238

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.21%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0192

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-9.35% / 92.59%

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF Internet Fax image file that has been compressed using CCITT Group 4 encoding, related to the EXPAND2D macro in libtiff/tif_fax3.h. NOTE: some of these details are obtained from third party information.

Product-windows windows_7 windows_xp windows_vista itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0567

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-14.13% / 94.19%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image that triggers an incorrect pointer calculation, leading to heap memory corruption, a different vulnerability than CVE-2011-0566 and CVE-2011-0603.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2009-4245

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-7.36% / 91.51%

7 Day CHG~0.00%

Published-25 Jan, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a compressed GIF file, related to gifcodec.cpp and gifimage.cpp.

Vendor-n/a RealNetworks LLC Microsoft Corporation Apple Inc.

Product-realplayer_sp realplayer_enterprise windows realplayer helix_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4375

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.21% / 89.70%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-linux_kernel realplayer mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4379

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.30% / 79.41%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4091

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-41.05% / 97.28%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4376

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.21% / 89.70%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-8555

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.46% / 63.82%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4314

Matching Score-10

Assigner-OpenText (formerly Micro Focus)

Matching Score-10

Assigner-OpenText (formerly Micro Focus)

CVSS Score-8.8||HIGH

EPSS-2.02% / 83.44%

7 Day CHG~0.00%

Published-11 Mar, 2017 | 06:46

Updated-20 Apr, 2025 | 01:37

Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter.

Vendor-n/a Microsoft Corporation Novell

Product-windows_7 iprint windows_vista windows_xp Novell iPrint webrowser ActiveX plugin

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4387

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.65% / 85.42%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4383

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.30% / 79.41%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted RA5 file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4377

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.83% / 90.33%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4381

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.23% / 78.79%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file.

Vendor-n/a RealNetworks LLC Apple Inc.

Product-realplayer_sp realplayer mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3821

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.42% / 84.78%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3954

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-61.04% / 98.26%

7 Day CHG~0.00%

Published-16 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."

Product-publisher n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3654

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Macromedia, Inc.Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-93.56% / 99.82%

7 Day CHG~0.00%

Published-29 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.

Product-linux_kernel windows acrobat_reader solaris acrobat flash_player android mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3950

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-61.04% / 98.26%

7 Day CHG~0.00%

Published-16 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image in an Office document, aka "TIFF Image Converter Memory Corruption Vulnerability."

Product-office_converter_pack works office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3952

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-61.04% / 98.26%

7 Day CHG~0.00%

Published-16 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Heap Corruption Vulnerability."