Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-3448
cve
2011
3448
heap-based buffer overflow
coremedia
apple
mac os x
10.7.3
remote attackers
arbitrary code
denial of service
application crash
crafted movie file
h.264 encoding
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
47.1%
Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
Affected configurations
Node
applemac_os_xRange≤10.7.2
ORapplemac_os_xMatch10.6.0
ORapplemac_os_xMatch10.6.1
ORapplemac_os_xMatch10.6.2
ORapplemac_os_xMatch10.6.3
ORapplemac_os_xMatch10.6.4
ORapplemac_os_xMatch10.6.5
ORapplemac_os_xMatch10.6.6
ORapplemac_os_xMatch10.6.7
ORapplemac_os_xMatch10.6.8
ORapplemac_os_xMatch10.7.0
ORapplemac_os_xMatch10.7.1
ORapplemac_os_x_serverRange≤10.7.2
ORapplemac_os_x_serverMatch10.6.0
ORapplemac_os_x_serverMatch10.6.1
ORapplemac_os_x_serverMatch10.6.2
ORapplemac_os_x_serverMatch10.6.3
ORapplemac_os_x_serverMatch10.6.4
ORapplemac_os_x_serverMatch10.6.5
ORapplemac_os_x_serverMatch10.6.6
ORapplemac_os_x_serverMatch10.6.7
ORapplemac_os_x_serverMatch10.6.8
ORapplemac_os_x_serverMatch10.7.0
ORapplemac_os_x_serverMatch10.7.1
Related
nvd
nvd
CVE-2011-3448
2012-02-02 18:55:01
prion
prion
Heap overflow
2012-02-02 18:55:00
cvelist
cvelist
CVE-2011-3448
2022-10-03 16:15:07
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)
2012-02-02 00:00:00
Mac OS X 10.7.x < 10.7.3 Multiple Vulnerabilities (BEAST)
2012-02-02 00:00:00
securityvulns
securityvulns
Apple OS X multiple security vulnerabilities
2012-02-03 00:00:00
APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001
2012-02-03 00:00:00
openvas
openvas
Mac OS X Multiple Vulnerabilities (2012-001)
2012-02-06 00:00:00
Mac OS X Multiple Vulnerabilities (2012-001)
2012-02-06 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
47.1%
Related for CVE-2011-3448