NGS00062 Patch Notification: Apple Mac OS X ImageIO TIFF Heap Overflow

Apple Mac OS X ImageIO TIFF Heap Overflow - CVE-2011-0204 28/06/2011 Dominic Chell of NGS Secure has discovered a High risk vulnerability in Mac OS X ImageIO. Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution Versions affected...

CVE-2011-0204

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image...

CVE-2011-0205

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image...

Heap overflow

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image...

Heap overflow

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image...

CVE-2011-0205

CVE-2011-0205 : Heap-based buffer overflow in Apple ImageIO on Mac OS X prior to 10.6.8 can be triggered by a crafted JPEG2000 image, potentially allowing remote code execution or a denial of service (application crash). The available data specifies the vulnerable component (ImageIO) and the impa...

CVE-2011-0204

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image...

CVE-2011-0205

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image...

CVE-2011-0204

CVE-2011-0204: Heap-based buffer overflow in ImageIO TIFF handling on Apple Mac OS X before 10.6.8. Remote attackers could cause code execution or a crash via a crafted TIFF image. Remediation: apply the Mac OS X 10.6.8 security update (HT4808/HT4723/HT4981 as referenced by Apple) or newer OS X s...

Mac OS X 10.6.x < 10.6.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.8. This update contains security-related fixes for the following components : - App Store - ATS - Certificate Trust Policy - CoreFoundation - CoreGraphics - FTP Server - ImageIO - International Components for Unicode -...

CVE-2011-0205: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image...

CVE-2011-0204: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image...

Mac OS X Multiple Vulnerabilities (Security Update 2011-004)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-004 applied. This update contains security- related fixes for the following components : - AirPort - App Store - ColorSync - CoreGraphics - ImageIO - Libsystem - libxslt - MySQL - patch - Samba -...

Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities

Binary data 800790.prm...

OpenJDK JPEG writeImage remote code execution (6963023)

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.227 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU...

CVE-2011-0194

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...

CVE-2011-0181

Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted XBM image...

Integer overflow

Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted XBM image...

Integer overflow

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...

CVE-2011-0181

Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted XBM image...