CVE-2010-0040

Опубликовано: 15 мар. 2010

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with a crafted color profile that triggers a heap-based buffer overflow.

Комментарий

Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

ColorSync CVE-ID: CVE-2010-0040 Available for: Windows 7, Vista, XP Impact: Viewing a maliciously crafted image with an embedded color profile may lead to an unexpected application termination or arbitrary code execution Description: An integer overflow, that could result in a heap buffer overflow, exists in the handling of images with an embedded color profile. Opening a maliciously crafted image with an embedded color profile may lead to an unexpected application termination or arbitrary code execution. The issue is addressed by performing additional validation of color profiles. This issue does not affect Mac OS X systems. Credit to Sebastien Renaud of VUPEN Vulnerability Research Team for reporting this issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 4.0.4 (включая)

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.19782

Средний

9.3 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

GHSA-qpvq-h769-rrw8

github

почти 4 года назад