CVE-2009-0010

🗓️ 13 May 2009 15:14:00Reported by mitreType

Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted PICT image

Reporter	Title	Published	Views	Family All 20
Tenable Nessus	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	18 Aug 200400:00	–	nessus
Tenable Nessus	QuickTime < 7.6.2 Multiple Vulnerabilities	18 Aug 200400:00	–	nessus
Tenable Nessus	Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities	13 May 200900:00	–	nessus
Tenable Nessus	Mac OS X Multiple Vulnerabilities (Security Update 2009-002)	13 May 200900:00	–	nessus
Tenable Nessus	QuickTime < 7.6.2 Multiple Vulnerabilities (Windows)	2 Jun 200900:00	–	nessus
Check Point Advisories	Apple QuickTime PICT Image Parsing Malformed Records (CVE-2007-4672; CVE-2007-4676; CVE-2009-0010)	7 Nov 200700:00	–	checkpoint_advisories
Check Point Advisories	Preemptive Protection against Apple QuickTime PICT Image paintPoly Parsing Heap Buffer Overflow	13 Jun 200900:00	–	checkpoint_advisories
Check Point Advisories	Apple QuickTime PICT Image Parsing Malformed Records - Ver2 (CVE-2009-0010)	26 Mar 201500:00	–	checkpoint_advisories
CVE	CVE-2009-0010	13 May 200915:14	–	cve
NVD	CVE-2009-0010	13 May 200915:30	–	nvd

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-09-021
vupen	www.vupen.com/english/advisories/2009/1407
securitytracker	www.securitytracker.com/id
vupen	www.vupen.com/exploits/Apple_QuickTime_PICT_Poly_Tag_Parsing_Heap_Overflow_PoC_Exploit_1407144.php
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-09-021/
vupen	www.vupen.com/english/advisories/2009/1297
support	www.support.apple.com/kb/HT3591
securityfocus	www.securityfocus.com/bid/34926
us-cert	www.us-cert.gov/cas/techalerts/TA09-133A.html
lists	www.lists.apple.com/archives/security-announce/2009/Jun/msg00000.html

11 Oct 2018 19:57Current

7.8High risk

Vulners AI Score7.8

EPSS0.52816