Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-0519 — Integer Overflow or Wraparound in Apple MAC OS X

CWE-189CWE-190 — Integer Overflow or Wraparound8 documents6 sources
Severity
6.8MEDIUMNVD
EPSS
5.8%
top 9.50%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedMar 30
Latest updateMay 2

Description

Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDapple/mac_os_x10.6.0, 10.6.1, 10.6.2+2
▶NVDapple/mac_os_x_server10.6.0, 10.6.1, 10.6.2+2

Patches

Patch: lists.apple.com ↗Patch: support.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wj8g-mf9j-qxgf: Integer overflow in QuickTime in Apple Mac OS X before 10↗2022-05-02
▶
CVEList
CVE-2010-0519: Integer overflow in QuickTime in Apple Mac OS X before 10↗2010-03-30
▶

💥Exploits & PoCs

1
Exploit-DB
Apple QuickTime FlashPix NumberOfTiles - Remote Code Execution↗2010-09-02
▶

📋Vendor Advisories

1
Red Hat
libtiff tiffdump integer overflow↗2010-06-22
▶

💬Community

3
Bugzilla
CVE-2010-4665 libtiff tiffdump integer overflow↗2011-04-12
▶
Bugzilla
CVE-2010-2483 libtiff: out-of-bounds read crash on images with invalid SamplesPerPixel values↗2010-07-06
▶
Bugzilla
CVE-2010-2481 libtiff: TIFFExtractData out-of-bounds read crash↗2010-07-06
▶
CVE-2010-0519 — Integer Overflow or Wraparound in Apple | cvebase