CVE-2011-3260

Опубликовано: 14 окт. 2011

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word document.

Ссылки

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
Vendor Advisory
http://support.apple.com/kb/HT4999
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/70556
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
Vendor Advisory
http://support.apple.com/kb/HT4999
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/70556

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:3.0:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1.2:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1.3:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2:-:ipodtouch:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2.1:-:ipad:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0:-:ipodtouch:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0.1:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0.1:-:ipodtouch:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.5:-:ipad:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.5:-:ipodtouch:*:*:*:*:*

EPSS

Процентиль: 81%

0.01604

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-mpfq-vr67-x4v4

github

больше 3 лет назад