Lucene search

AppleCVE-2010-0543

HistoryJun 17, 2010 - 4:30 p.m.

CVE-2010-0543

2010-06-1716:30:01

CWE-119

apple

web.nvd.nist.gov

cve-2010-0543

imageio

apple

mac os x

remote attackers

arbitrary code execution

denial of service

memory corruption

application crash

movie file

mpeg2 encoding

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.018

Percentile

88.6%

JSON

ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with MPEG2 encoding.

Affected configurations

Nvd

Node

applemac_os_xMatch10.5.8

applemac_os_xMatch10.6.0

applemac_os_xMatch10.6.1

applemac_os_x_serverMatch10.5.8

applemac_os_x_serverMatch10.6.0

applemac_os_x_serverMatch10.6.1

VendorProductVersionCPE
applemac_os_x10.5.8cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*
applemac_os_x10.6.0cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*
applemac_os_x10.6.1cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*
applemac_os_x_server10.5.8cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*
applemac_os_x_server10.6.0cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*
applemac_os_x_server10.6.1cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.5.8	cpe:2.3:o:apple:mac_os_x:10.5.8:::::::*
apple	mac_os_x	10.6.0	cpe:2.3:o:apple:mac_os_x:10.6.0:::::::*
apple	mac_os_x	10.6.1	cpe:2.3:o:apple:mac_os_x:10.6.1:::::::*
apple	mac_os_x_server	10.5.8	cpe:2.3:o:apple:mac_os_x_server:10.5.8:::::::*
apple	mac_os_x_server	10.6.0	cpe:2.3:o:apple:mac_os_x_server:10.6.0:::::::*
apple	mac_os_x_server	10.6.1	cpe:2.3:o:apple:mac_os_x_server:10.6.1:::::::*

References

lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

secunia.com/advisories/40220

securitytracker.com/id?1024103

support.apple.com/kb/HT4188

www.securityfocus.com/bid/40871

www.vupen.com/english/advisories/2010/1481

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.018

Percentile

88.6%

JSON

Related for CVE-2010-0543