Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with CCITT Group 4 encoding.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://support.apple.com/kb/HT5130 | x_refsource_CONFIRM |
| http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html | vendor-advisory x_refsource_APPLE |
| http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html | vendor-advisory x_refsource_APPLE |
| http://support.apple.com/kb/HT4999 | x_refsource_CONFIRM |
| http://support.apple.com/kb/HT5001 | x_refsource_CONFIRM |
| http://support.apple.com/kb/HT4808 | x_refsource_CONFIRM |
| http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html | vendor-advisory x_refsource_APPLE |
| http://support.apple.com/kb/HT5281 | x_refsource_CONFIRM |
| http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html | vendor-advisory x_refsource_APPLE |
| http://lists.apple.com/archives/security-announce/2012/May/msg00001.html | vendor-advisory x_refsource_APPLE |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://support.apple.com/kb/HT5130 | x_refsource_CONFIRM x_transferred |
| http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html | vendor-advisory x_refsource_APPLE x_transferred |
| http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html | vendor-advisory x_refsource_APPLE x_transferred |
| http://support.apple.com/kb/HT4999 | x_refsource_CONFIRM x_transferred |
| http://support.apple.com/kb/HT5001 | x_refsource_CONFIRM x_transferred |
| http://support.apple.com/kb/HT4808 | x_refsource_CONFIRM x_transferred |
| http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html | vendor-advisory x_refsource_APPLE x_transferred |
| http://support.apple.com/kb/HT5281 | x_refsource_CONFIRM x_transferred |
| http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html | vendor-advisory x_refsource_APPLE x_transferred |
| http://lists.apple.com/archives/security-announce/2012/May/msg00001.html | vendor-advisory x_refsource_APPLE x_transferred |