Lucene search

[email protected]CVE-2011-0186

HistoryMar 23, 2011 - 2:00 a.m.

CVE-2011-0186

2011-03-2302:00:05

CWE-119

[email protected]

web.nvd.nist.gov

quicktime

apple

mac os x

cve-2011-0186

vulnerability

jpeg2000

remote code execution

denial of service

memory corruption

application crash

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.

Affected configurations

NVD

Node

applequicktime

applemac_os_xMatch10.6.0

applemac_os_xMatch10.6.1

applemac_os_xMatch10.6.2

applemac_os_xMatch10.6.3

applemac_os_xMatch10.6.4

applemac_os_xMatch10.6.5

applemac_os_xMatch10.6.6

Node

applequicktime

applemac_os_x_serverMatch10.6.0

applemac_os_x_serverMatch10.6.1

applemac_os_x_serverMatch10.6.2

applemac_os_x_serverMatch10.6.3

applemac_os_x_serverMatch10.6.4

applemac_os_x_serverMatch10.6.5

applemac_os_x_serverMatch10.6.6

CPENameOperatorVersion
apple:quicktimeapple quicktimeeq*
apple:mac_os_xapple mac os xeq10.6.0
apple:mac_os_xapple mac os xeq10.6.1
apple:mac_os_xapple mac os xeq10.6.2
apple:mac_os_xapple mac os xeq10.6.3
apple:mac_os_xapple mac os xeq10.6.4
apple:mac_os_xapple mac os xeq10.6.5
apple:mac_os_xapple mac os xeq10.6.6

CPE	Name	Operator	Version
apple:quicktime	apple quicktime	eq	*
apple:mac_os_x	apple mac os x	eq	10.6.0
apple:mac_os_x	apple mac os x	eq	10.6.1
apple:mac_os_x	apple mac os x	eq	10.6.2
apple:mac_os_x	apple mac os x	eq	10.6.3
apple:mac_os_x	apple mac os x	eq	10.6.4
apple:mac_os_x	apple mac os x	eq	10.6.5
apple:mac_os_x	apple mac os x	eq	10.6.6