CVE-2011-0186

Published Mar 23, 2011 CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed
Description
QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-0212 QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.
History
Type Values Removed Values Added
Weaknesses CWE-119 CWE-787
CPEs cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.6.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.6.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*
Metrics cvssV2_0

{'score': 6.8, 'vector': 'AV:N/AC:M/Au:N/C:P/I:P/A:P'}

cvssV2_0

{'score': 4.3, 'vector': 'AV:N/AC:M/Au:N/C:P/I:N/A:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 6, 2024, 9:43 PM
Reserved
Dec 23, 2010, 12:00 AM
Status
Modified
Published
Mar 23, 2011, 2:00 AM
Modified
Jun 16, 2026, 11:26 PM