CVE-2010-0543 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple MAC OS X

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources

Severity

6.8MEDIUMNVD

EPSS

2.1%

top 15.85%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple MAC OS X Apple MAC OS X Server

Timeline

PublishedJun 17

Latest updateMay 2

Description

ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with MPEG2 encoding.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDapple/mac_os_x10.5.8, 10.6.0, 10.6.1+2

▶NVDapple/mac_os_x_server10.5.8, 10.6.0, 10.6.1+2

Patches

Patch: support.apple.com ↗Patch: www.securityfocus.com ↗Patch: www.vupen.com ↗

🔴Vulnerability Details

GHSA

GHSA-x8w2-j4r4-76v8: ImageIO in Apple Mac OS X 10↗2022-05-02

▶

CVEList

CVE-2010-0543: ImageIO in Apple Mac OS X 10↗2010-06-17

▶

📋Vendor Advisories

Red Hat

OpenLDAP: Doesn't properly handle NULL character in subject Common Name↗2009-08-10

▶

💬Community

Bugzilla

CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack↗2010-11-08

▶