CVE-2011-0177 | ByteOS Network

Vulnerability Details :

CVE-2011-0177

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-23 Mar, 2011 | 01:00

Updated At-17 Sep, 2024 | 00:31

Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:23 Mar, 2011 | 01:00

Updated At:17 Sep, 2024 | 00:31

▼CVE Numbering Authority (CNA)

Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	vendor-advisory x_refsource_APPLE
http://support.apple.com/kb/HT4581	x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://support.apple.com/kb/HT4581

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	vendor-advisory x_refsource_APPLE x_transferred
http://support.apple.com/kb/HT4581	x_refsource_CONFIRM x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://support.apple.com/kb/HT4581

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@apple.com

Published At:23 Mar, 2011 | 02:00

Updated At:11 Apr, 2025 | 00:51

Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

>>mac_os_x>>Versions up to 10.6.6(inclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

>>mac_os_x>>10.6.0

cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*

>>mac_os_x>>10.6.1

cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*

>>mac_os_x>>10.6.2

cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*

>>mac_os_x>>10.6.3

cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*

>>mac_os_x>>10.6.4

cpe:2.3:o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*

>>mac_os_x>>10.6.5

cpe:2.3:o:apple:mac_os_x:10.6.5:*:*:*:*:*:*:*

>>mac_os_x_server>>Versions up to 10.6.6(inclusive)

cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.0

cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.1

cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.2

cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.3

cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.4

cpe:2.3:o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.6.5

cpe:2.3:o:apple:mac_os_x_server:10.6.5:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	product-security@apple.com	Patch Vendor Advisory
http://support.apple.com/kb/HT4581	product-security@apple.com	Patch Vendor Advisory
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://support.apple.com/kb/HT4581	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: product-security@apple.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4581

Source: product-security@apple.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4581

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Similar CVEs

4704Records found

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.98% / 88.13%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:16

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.89% / 75.13%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os watchos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.69% / 71.33%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-itunes iphone_os icloud watchos safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.87% / 74.78%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.

Vendor-n/a Apple Inc.

Product-iphone_os watchos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.53% / 66.80%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .gcx file.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.53% / 66.80%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Grapher" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .gcx file.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.87% / 74.78%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreMedia Playback" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted MP4 file.

Vendor-n/a Apple Inc.

Product-iphone_os watchos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.63% / 69.76%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-4.34% / 88.67%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted certificate profile.

Vendor-n/a Apple Inc.

Product-iphone_os tvos watchos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.37% / 79.91%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-itunes tvos iphone_os icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.76% / 72.83%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-28.28% / 96.39%

||

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos tv_os tvOS macOS watchOS iOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 76.37%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 76.30%

||

7 Day CHG~0.00%

Published-25 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4765, CVE-2016-4766, CVE-2016-4767, and CVE-2016-4768.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-itunes safari windows iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.11% / 77.73%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44 compression.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.77% / 73.06%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Vendor-n/a Apple Inc.

Product-safari iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.67% / 70.79%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Vendor-n/a Apple Inc.

Product-safari tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.27% / 79.19%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Vendor-n/a Apple Inc.

Product-tvos webkit n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 71.93%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes icloud safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.92% / 75.55%

||

7 Day CHG~0.00%

Published-25 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4730, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735.

Vendor-n/a Apple Inc.

Product-safari iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.10% / 83.73%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted BMP image.

Vendor-n/a Apple Inc.

Product-mac_os_x iphone_os watchos tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-74.79% / 98.83%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624.

Vendor-n/a Apple Inc.

Product-safari iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.14% / 78.05%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os tvos safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.52% / 66.31%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624.

Vendor-n/a Apple Inc.

Product-safari iphone_os tvos webkit n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.66% / 70.47%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 76.37%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.77% / 73.11%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.

Vendor-n/a Apple Inc.

Product-iphone_os tvos watchos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.71% / 85.58%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF file.

Vendor-n/a Apple Inc.

Product-mac_os_x iphone_os watchos tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.63% / 69.77%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted SGI file.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.96% / 76.02%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes tvos safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.24% / 78.92%

||

7 Day CHG~0.00%

Published-02 Feb, 2012 | 18:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 76.30%

||

7 Day CHG~0.00%

Published-25 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766, and CVE-2016-4767.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-itunes safari windows iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-3.39% / 87.12%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 76.37%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.90% / 75.26%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623.

Vendor-n/a Apple Inc.

Product-safari iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.51% / 65.84%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.00% / 76.53%

||

7 Day CHG~0.00%

Published-25 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766, and CVE-2016-4768.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-itunes safari windows iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.62% / 69.46%

||

7 Day CHG~0.00%

Published-25 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 76.37%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4602.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.52% / 66.31%

||

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4624.

Vendor-n/a Apple Inc.

Product-safari iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer