Lucene search

K
cveAppleCVE-2013-0971
HistoryMar 15, 2013 - 8:55 p.m.

CVE-2013-0971

2013-03-1520:55:11
CWE-399
apple
web.nvd.nist.gov
33
cve-2013-0971
pdfkit
apple
mac os x
vulnerability
remote
execute
arbitrary code
denial of service
application crash

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.012

Percentile

85.6%

Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted ink annotations in a PDF document.

Affected configurations

Nvd
Node
applemac_os_xMatch10.6.8
OR
applemac_os_x_serverMatch10.6.8
Node
applemac_os_xMatch10.7.0
OR
applemac_os_xMatch10.7.1
OR
applemac_os_xMatch10.7.2
OR
applemac_os_xMatch10.7.3
OR
applemac_os_xMatch10.7.4
OR
applemac_os_xMatch10.7.5
OR
applemac_os_x_serverMatch10.7.0
OR
applemac_os_x_serverMatch10.7.1
OR
applemac_os_x_serverMatch10.7.2
OR
applemac_os_x_serverMatch10.7.3
OR
applemac_os_x_serverMatch10.7.4
OR
applemac_os_x_serverMatch10.7.5
Node
applemac_os_xMatch10.8.0
OR
applemac_os_xMatch10.8.1
OR
applemac_os_xMatch10.8.2
VendorProductVersionCPE
applemac_os_x10.6.8cpe:2.3:o:apple:mac_os_x:10.6.8:*:*:*:*:*:*:*
applemac_os_x_server10.6.8cpe:2.3:o:apple:mac_os_x_server:10.6.8:*:*:*:*:*:*:*
applemac_os_x10.7.0cpe:2.3:o:apple:mac_os_x:10.7.0:*:*:*:*:*:*:*
applemac_os_x10.7.1cpe:2.3:o:apple:mac_os_x:10.7.1:*:*:*:*:*:*:*
applemac_os_x10.7.2cpe:2.3:o:apple:mac_os_x:10.7.2:*:*:*:*:*:*:*
applemac_os_x10.7.3cpe:2.3:o:apple:mac_os_x:10.7.3:*:*:*:*:*:*:*
applemac_os_x10.7.4cpe:2.3:o:apple:mac_os_x:10.7.4:*:*:*:*:*:*:*
applemac_os_x10.7.5cpe:2.3:o:apple:mac_os_x:10.7.5:*:*:*:*:*:*:*
applemac_os_x_server10.7.0cpe:2.3:o:apple:mac_os_x_server:10.7.0:*:*:*:*:*:*:*
applemac_os_x_server10.7.1cpe:2.3:o:apple:mac_os_x_server:10.7.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 171

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.012

Percentile

85.6%