CVE-2011-3459

Published Feb 2, 2012

Last updated 12 years ago

Overview

Description: Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf atom in a movie file that triggers a buffer overflow.
Source: product-security@apple.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-189

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B52C3912-5F34-4C5C-9B02-953C5DE8DE49",
            "versionEndIncluding": "10.7.2"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3C69DEE9-3FA5-408E-AD27-F5E7043F852A"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D25D1FD3-C291-492C-83A7-0AFAFAADC98D"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5B565F77-C310-4B83-B098-22F9489C226C"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "546EBFC8-79F0-42C2-9B9A-A76CA3F19470"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "119C8089-8C98-472E-9E9C-1741AA21DD35"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "831C5105-6409-4743-8FB5-A91D8956202F"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0B63D169-E2AA-4315-891F-B4AF99F2753C"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E715DFC-ADB8-43D0-9941-76BB0BE7BCF5"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E9D96EC5-8FFC-4C8D-9C3E-EFEE79D4D52C"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8961F444-48C4-4B54-829B-A1A2D0F2716C"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.7.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "09A0FA11-6211-4962-A6E0-F00732818012"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "19E02215-21EA-41A7-B977-01CE5CB2424F",
            "versionEndIncluding": "10.7.2"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26E34E35-CCE9-42BE-9AFF-561D8AA90E25"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A04FF6EE-D4DA-4D70-B0CE-154292828531"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9425320F-D119-49EB-9265-3159070DFE93"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6BE138D-619B-4E44-BFB2-8DFE5F0D1E12"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EF0D1051-F850-4A02-ABA0-968E1336A518"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A1C9705A-74D4-43BA-A119-C667678F9A15"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4BBF5FE5-4B25-47BE-8D9D-F228746408EC"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8CE84A25-CEFB-4165-9498-2E4BF60E2C0E"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A557D31B-4614-41E0-85EA-804C2DDF4919"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "38823717-65A1-4587-8F05-32EA9A01084C"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.7.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7BD4E77C-3F87-476B-BB66-75EECDFDB18E"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References