Lucene search

[email protected]CVE-2010-1808

HistoryAug 25, 2010 - 8:00 p.m.

CVE-2010-1808

2010-08-2520:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-1808

apple

mac os x

buffer overflow

ats

remote attackers

arbitrary code

denial of service

application crash

8.2 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.1%

JSON

Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document.

CPENameOperatorVersion
apple:apple_type_servicesapple apple type serviceseq*
apple:mac_os_xapple mac os xeq10.5.8
apple:mac_os_xapple mac os xeq10.6.4
apple:mac_os_x_serverapple mac os x servereq10.5.8
apple:mac_os_x_serverapple mac os x servereq10.6.4

CPE	Name	Operator	Version
apple:apple_type_services	apple apple type services	eq	*
apple:mac_os_x	apple mac os x	eq	10.5.8
apple:mac_os_x	apple mac os x	eq	10.6.4
apple:mac_os_x_server	apple mac os x server	eq	10.5.8
apple:mac_os_x_server	apple mac os x server	eq	10.6.4

References

lists.apple.com/archives/security-announce/2010//Aug/msg00003.html

securitytracker.com/id?1024359

support.apple.com/kb/HT4312

8.2 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.1%

JSON

Related for CVE-2010-1808

cvelist1 prion1 nessus1