Lucene search

[email protected]NVD:CVE-2011-3458

HistoryFeb 02, 2012 - 6:55 p.m.

CVE-2011-3458

2012-02-0218:55:01

CWE-264

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.4%

JSON

QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 file.

Affected configurations

NVD

Node

applemac_os_xRange≤10.7.2

applemac_os_xMatch10.7.0

applemac_os_xMatch10.7.1

applemac_os_x_serverRange≤10.7.2

applemac_os_x_serverMatch10.7.0

applemac_os_x_serverMatch10.7.1

References

lists.apple.com/archives/security-announce/2012/Feb/msg00000.html

lists.apple.com/archives/security-announce/2012/May/msg00005.html

support.apple.com/kb/HT5130

support.apple.com/kb/HT5261

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.4%

JSON

Related for NVD:CVE-2011-3458

seebug2 cve1 securityvulns5 zdi1 prion1 cvelist1 openvas4 nessus5