CVE-2011-0194

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.

Score

CVSS 2.0 6.8 Medium

Status

Modified - product-security@apple.com

Published

2011-03-23

Last modified

2024-09-16

Weaknesses

CWE-189

Affected products

• Imageio (Apple)
• Mac Os X (Apple)
• Mac Os X Server (Apple)

References

• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
• http://support.apple.com/kb/HT4581