ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://support.apple.com/kb/HT4566

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.vupen.com/english/advisories/2011/0621

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.vupen.com/english/advisories/2011/0905

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.debian.org/security/2011/dsa-2210

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://blackberry.com/btsc/KB27244

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0318.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2011/0551

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://security.gentoo.org/glsa/glsa-201209-02.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.vupen.com/english/advisories/2011/0930

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://support.apple.com/kb/HT4999

Resource:

x_refsource_CONFIRM

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=678635

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id?1025153

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://support.apple.com/kb/HT5001

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.apple.com/kb/HT4554

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html

Resource:

vendor-advisory

x_refsource_APPLE

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2011/0960

Resource:

vdb-entry

x_refsource_VUPEN

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html

Resource:

vendor-advisory

x_refsource_APPLE

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:043

Resource:

vendor-advisory

x_refsource_MANDRIVA

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html

Resource:

vendor-advisory

x_refsource_FEDORA

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://support.apple.com/kb/HT4581

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2011/0845	vdb-entry x_refsource_VUPEN x_transferred
http://support.apple.com/kb/HT4564	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html	vendor-advisory x_refsource_SUSE x_transferred
http://support.apple.com/kb/HT4565	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0599	vdb-entry x_refsource_VUPEN x_transferred
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820	vendor-advisory x_refsource_SLACKWARE x_transferred
http://www.securityfocus.com/bid/46658	vdb-entry x_refsource_BID x_transferred
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/43934	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html	vendor-advisory x_refsource_FEDORA x_transferred
http://support.apple.com/kb/HT4566	x_refsource_CONFIRM x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.vupen.com/english/advisories/2011/0621	vdb-entry x_refsource_VUPEN x_transferred
http://www.vupen.com/english/advisories/2011/0905	vdb-entry x_refsource_VUPEN x_transferred
http://www.debian.org/security/2011/dsa-2210	vendor-advisory x_refsource_DEBIAN x_transferred
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	vendor-advisory x_refsource_APPLE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html	vendor-advisory x_refsource_SUSE x_transferred
http://blackberry.com/btsc/KB27244	x_refsource_CONFIRM x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0318.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/43664	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2011/0551	vdb-entry x_refsource_VUPEN x_transferred
http://security.gentoo.org/glsa/glsa-201209-02.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.vupen.com/english/advisories/2011/0930	vdb-entry x_refsource_VUPEN x_transferred
http://support.apple.com/kb/HT4999	x_refsource_CONFIRM x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=678635	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id?1025153	vdb-entry x_refsource_SECTRACK x_transferred
http://support.apple.com/kb/HT5001	x_refsource_CONFIRM x_transferred
http://support.apple.com/kb/HT4554	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/44135	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2011/0960	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43585	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/44117	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2011:043	vendor-advisory x_refsource_MANDRIVA x_transferred
http://secunia.com/advisories/43593	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html	vendor-advisory x_refsource_FEDORA x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html	vendor-advisory x_refsource_FEDORA x_transferred
http://secunia.com/advisories/50726	third-party-advisory x_refsource_SECUNIA x_transferred
http://support.apple.com/kb/HT4581	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0845

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://support.apple.com/kb/HT4564

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://support.apple.com/kb/HT4565

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0599

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820

Resource:

vendor-advisory

x_refsource_SLACKWARE

x_transferred

Hyperlink: http://www.securityfocus.com/bid/46658

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://support.apple.com/kb/HT4566

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0621

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0905

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.debian.org/security/2011/dsa-2210

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://blackberry.com/btsc/KB27244

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0318.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0551

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201209-02.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0930

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://support.apple.com/kb/HT4999

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=678635

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securitytracker.com/id?1025153

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://support.apple.com/kb/HT5001

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://support.apple.com/kb/HT4554

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0960

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:043

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://support.apple.com/kb/HT4581

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:03 Mar, 2011 | 20:00

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*

>>itunes>>Versions up to 10.1.2(inclusive)

cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*

>>itunes>>4.0.0

cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*

>>itunes>>4.0.1

cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*

>>itunes>>4.1.0

cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*

>>itunes>>4.2.0

cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*

>>itunes>>4.5

cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*

>>itunes>>4.5.0

cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*

>>itunes>>4.6

cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*

>>itunes>>4.6.0

cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*

>>itunes>>4.7

cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*

>>itunes>>4.7.0

cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*

>>itunes>>4.7.1

cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*

>>itunes>>4.7.2

cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*

>>itunes>>4.8.0

cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*

>>itunes>>4.9.0

cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*

>>itunes>>5.0

cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*

>>itunes>>5.0.0

cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*

>>itunes>>5.0.1

cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*

>>itunes>>6.0.0

cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*

>>itunes>>6.0.1

cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*

>>itunes>>6.0.2

cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*

>>itunes>>6.0.3

cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*

>>itunes>>6.0.4

cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*

>>itunes>>6.0.4.2

cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*

>>itunes>>6.0.5

cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*

>>itunes>>7.0.0

cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*

>>itunes>>7.0.1

cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*

>>itunes>>7.0.2

cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*

>>itunes>>7.1.0

cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*

>>itunes>>7.1.1

cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*

>>itunes>>7.2.0

cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*

>>itunes>>7.3.0

cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*

>>itunes>>7.3.1

cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*

>>itunes>>7.3.2

cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*

>>itunes>>7.4

cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*

>>itunes>>7.4.0

cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*

>>itunes>>7.4.1

cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*

>>itunes>>7.4.2

cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*

>>itunes>>7.4.3

cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*

>>itunes>>7.5

cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*

>>itunes>>7.5.0

cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*

>>itunes>>7.6

cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*

>>itunes>>7.6.0

cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*

>>itunes>>7.6.1

cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*

>>itunes>>7.6.2

cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*

>>itunes>>7.7

cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*

>>itunes>>7.7.0

cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*

>>itunes>>7.7.1

cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*

>>itunes>>8.0.0

cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*

>>itunes>>8.0.1

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://blackberry.com/btsc/KB27244	product-security@apple.com	N/A
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html	product-security@apple.com	N/A
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html	product-security@apple.com	Patch Vendor Advisory
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	product-security@apple.com	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html	product-security@apple.com	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html	product-security@apple.com	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html	product-security@apple.com	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html	product-security@apple.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html	product-security@apple.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html	product-security@apple.com	N/A
http://secunia.com/advisories/43585	product-security@apple.com	N/A
http://secunia.com/advisories/43593	product-security@apple.com	N/A
http://secunia.com/advisories/43664	product-security@apple.com	N/A
http://secunia.com/advisories/43934	product-security@apple.com	N/A
http://secunia.com/advisories/44117	product-security@apple.com	N/A
http://secunia.com/advisories/44135	product-security@apple.com	N/A
http://secunia.com/advisories/50726	product-security@apple.com	N/A
http://security.gentoo.org/glsa/glsa-201209-02.xml	product-security@apple.com	N/A
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820	product-security@apple.com	N/A
http://support.apple.com/kb/HT4554	product-security@apple.com	Vendor Advisory
http://support.apple.com/kb/HT4564	product-security@apple.com	N/A
http://support.apple.com/kb/HT4565	product-security@apple.com	N/A
http://support.apple.com/kb/HT4566	product-security@apple.com	N/A
http://support.apple.com/kb/HT4581	product-security@apple.com	N/A
http://support.apple.com/kb/HT4999	product-security@apple.com	N/A
http://support.apple.com/kb/HT5001	product-security@apple.com	N/A
http://www.debian.org/security/2011/dsa-2210	product-security@apple.com	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:043	product-security@apple.com	N/A
http://www.redhat.com/support/errata/RHSA-2011-0318.html	product-security@apple.com	N/A
http://www.securityfocus.com/bid/46658	product-security@apple.com	N/A
http://www.securitytracker.com/id?1025153	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0551	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0599	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0621	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0845	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0905	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0930	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0960	product-security@apple.com	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=678635	product-security@apple.com	N/A
http://blackberry.com/btsc/KB27244	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43585	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43593	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43664	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43934	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/44117	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/44135	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/50726	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201209-02.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4554	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://support.apple.com/kb/HT4564	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4565	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4566	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4581	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4999	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT5001	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2011/dsa-2210	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:043	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2011-0318.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/46658	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1025153	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0551	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0599	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0621	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0845	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0905	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0930	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0960	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=678635	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://blackberry.com/btsc/KB27244

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html

Source: product-security@apple.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201209-02.xml

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4554

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4564

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4565

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4566

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4581

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4999

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT5001

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.debian.org/security/2011/dsa-2210

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:043

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0318.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/46658

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1025153

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0551

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0599

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0621

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0845

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0905

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0930

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0960

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=678635

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://blackberry.com/btsc/KB27244

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201209-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4554

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4564

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4565

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4566

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4581

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4999

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT5001

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.debian.org/security/2011/dsa-2210

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:043

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0318.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/46658

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1025153

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0551

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0599

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0621

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0845

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0905

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0930

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0960

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=678635

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

7852Records found

CVE-2016-1831

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 36.95%

7 Day CHG-0.25%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0528

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.16% / 86.39%

7 Day CHG~0.00%

Published-31 Mar, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1723

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.70% / 81.50%

7 Day CHG~0.00%

Published-01 Feb, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1725 and CVE-2016-1726.

Vendor-n/a Apple Inc.

Product-safari iphone_os watchos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-3335

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-7.18% / 91.21%

7 Day CHG~0.00%

Published-10 Nov, 2016 | 06:16

Updated-12 Apr, 2025 | 10:46

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184.

Product-windows_server_2016 windows_7 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-3260

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-22.64% / 95.64%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

Product-internet_explorer edge n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0479

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-62.23% / 98.29%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."

Product-publisher n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0478

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-78.68% / 99.00%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability."

Product-windows_2000 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-3278

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-25.85% / 96.05%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Product-outlook_rt outlook n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-3367

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.25% / 95.87%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."

Product-silverlight n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-3361

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-19.79% / 95.22%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Microsoft Excel 2010 SP2 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Product-excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1279

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-43.53% / 97.42%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1290

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-2.09% / 83.33%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1291.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows shockwave_player macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1284

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-2.55% / 84.90%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1292

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.20%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0589

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-2.66% / 85.18%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0563 and CVE-2011-0606.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4144

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 60.22%

7 Day CHG~0.00%

Published-03 Apr, 2018 | 06:00

Updated-05 Aug, 2024 | 05:04

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Security" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-itunes iphone_os watchos tvos mac_os_x windows icloud n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-3338

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-7.18% / 91.21%

7 Day CHG~0.00%

Published-10 Nov, 2016 | 06:16

Updated-12 Apr, 2025 | 10:46

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184.

Product-windows_server_2016 windows_7 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1817

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 64.07%

7 Day CHG-0.25%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1818 and CVE-2016-1819.

Vendor-n/a Apple Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1286

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-4.40% / 88.55%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1829

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 64.09%

7 Day CHG-0.33%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828, and CVE-2016-1830.

Vendor-n/a Apple Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1736

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 47.25%

7 Day CHG~0.00%

Published-24 Mar, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1735.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1241

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-26.20% / 96.09%

7 Day CHG+7.62%

Published-05 Apr, 2010 | 15:15

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1291

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-4.40% / 88.55%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1288

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-7.68% / 91.53%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1749

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.91% / 82.49%

7 Day CHG~0.00%

Published-24 Mar, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0566

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-7.75% / 91.57%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0567 and CVE-2011-0603.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1818

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.91% / 74.85%

7 Day CHG-0.44%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Apple Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1822

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 36.93%

7 Day CHG-0.27%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0603

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-9.98% / 92.74%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0194

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-9.51% / 92.52%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0197, CVE-2010-0201, and CVE-2010-0204.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0204

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-6.58% / 90.77%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0197

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-9.51% / 92.52%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0120

Matching Score-10

Assigner-Flexera Software LLC

Matching Score-10

Assigner-Flexera Software LLC

CVSS Score-9.3||HIGH

EPSS-15.56% / 94.42%

7 Day CHG~0.00%

Published-30 Aug, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content.

Vendor-n/a RealNetworks LLC Microsoft Corporation

Product-realplayer_sp windows realplayer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0198

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-26.98% / 96.18%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0199, CVE-2010-0202, and CVE-2010-0203.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0202

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-12.77% / 93.75%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0037

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-4.73% / 88.97%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted DNG image.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a mac_os_x_server

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1824

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 64.09%

7 Day CHG-0.33%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1823.

Vendor-n/a Apple Inc.

Product-watchos iphone_os mac_os_x tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1815

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 46.77%

7 Day CHG-0.09%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0036

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.56% / 80.75%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 audio file.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a mac_os_x_server

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1270

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-35.49% / 96.93%

7 Day CHG~0.00%

Published-13 May, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability."

Product-powerpoint n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1808

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.35% / 56.94%

7 Day CHG-0.25%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0033

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-80.59% / 99.10%

7 Day CHG~0.00%

Published-10 Feb, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."

Product-powerpoint n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4357

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.17% / 38.85%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 17:43

Updated-05 Aug, 2024 | 05:11

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10.

Vendor-n/a Apple Inc.

Product-xcode Xcode

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0255

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.31% / 86.72%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1834

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-2.82% / 85.59%

7 Day CHG+1.11%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0245

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.25% / 88.34%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pict file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0218

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.31% / 86.72%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0029

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-63.06% / 98.32%

7 Day CHG~0.00%

Published-10 Feb, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."

Product-powerpoint n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0223

Matching Score-10

Assigner-Apple Inc.