Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3224 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76375 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3225 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest users from accessing the share point record of a guest-restricted folder, which allows remote attackers to bypass intended browsing restrictions by leveraging access to the nobody account. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://osvdb.org/76376 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3226 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307 or custom mappings, allows remote attackers to bypass the password requirement by leveraging lack of an AuthenticationAuthority attribute for a user account. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://osvdb.org/76371 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3227 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extension in a Certificate Revocation list (CRL), which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) a crafted (1) web site or (2) e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3228 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://osvdb.org/76372 - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50127 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3229 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions context, via a crafted safari-extension: URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70566 - http://osvdb.org/76388 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-3230 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70567 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://osvdb.org/76389 - http://support.apple.com/kb/HT5000 - http://www.securityfocus.com/bid/50162
CVE ID: CVE-2011-3231 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the processing of X.509 certificates, which allows remote web servers to execute arbitrary code via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://support.apple.com/kb/HT5000 - http://osvdb.org/76390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70568
CVE ID: CVE-2011-3232 State: PUBLISHED Published: 2011-09-29T00:00:00 Last Updated: 2024-08-06T23:29:56.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.webkit.org/show_bug.cgi?id=61585 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://www.mozilla.org/security/announce/2011/mfsa2011-42.html - http://lists.a
urity-announce/2011//Oct/msg00001.html - http://www.mozilla.org/security/announce/2011/mfsa2011-42.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://secunia.com/advisories/46315 - https://bugzilla.mozilla.org/show_bug.cgi?id=653672 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://secunia.com/advisories/49055 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:141 - http://support.apple.com/kb/HT4999 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:142 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14408 - http://support.apple.com/kb/HT5001 - http://list
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14408 - http://support.apple.com/kb/HT5001 - http://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html - http://support.apple.com/kb/HT5000 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html
CVE ID: CVE-2011-3233 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:56.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76383 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives
/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17203 - http://support.apple.com/kb/HT5000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70511
CVE ID: CVE-2011-3234 State: PUBLISHED Published: 2011-09-17T10:00:00 Last Updated: 2024-08-06T23:29:56.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=89991 - http://osvdb.org/75550 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://oval.cisecurity
/Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14224 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html - http://support.apple.com/kb/HT4999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69876 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-3235 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:55.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//
.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17170 - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5000 - http://osvdb.org/76349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70512
CVE ID: CVE-2011-3236 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:56.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//
.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70513 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16714 - http://osvdb.org/76350 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-3237 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:56.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//
.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70514 - http://support.apple.com/kb/HT5000 - http://osvdb.org/76351
CVE ID: CVE-2011-3238 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:56.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70515 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-annou
ibmcloud.com/vulnerabilities/70515 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17212 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-3239 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:56.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70516 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.ht
ies/70516 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://osvdb.org/76386 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17483 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-3240 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:08.916Z Description: No description available.
CVE ID: CVE-2011-3241 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:56.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76387 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives
/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70517 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-3242 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70569 - http://osvdb.org/76391 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-3243 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70564 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://www.securityfocus.com/bid/50088 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html -
l - http://www.securityfocus.com/bid/50088 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://osvdb.org/76353 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-3244 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:56.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70518 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.ht
ies/70518 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17355 - http://osvdb.org/76352
CVE ID: CVE-2011-3245 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent use of a keyboard, which allows physically proximate attackers to obtain sensitive information by reading this character. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://osvdb.org/76329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70555 - http://support.apple.com/kb/HT4999
CVE ID: CVE-2011-3246 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.a
unce/2011//Oct/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5052 - http://support.apple.com/kb/HT4999 - http://www.securityfocus.com/bid/50115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70551 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3247 State: PUBLISHED Published: 2011-10-28T01:00:00 Last Updated: 2024-08-06T23:29:56.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16071
CVE ID: CVE-2011-3248 State: PUBLISHED Published: 2011-10-28T01:00:00 Last Updated: 2024-08-06T23:29:56.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font table in a QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://support.apple.com/kb/HT5016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16012
CVE ID: CVE-2011-3249 State: PUBLISHED Published: 2011-10-28T01:00:00 Last Updated: 2024-08-06T23:29:56.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FLC encoding. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16130 - http://support.apple.com/kb/HT5016
CVE ID: CVE-2011-3250 State: PUBLISHED Published: 2011-10-28T01:00:00 Last Updated: 2024-08-06T23:29:56.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15825 - http://support.apple.com/kb/HT5016
CVE ID: CVE-2011-3251 State: PUBLISHED Published: 2011-10-28T01:00:00 Last Updated: 2024-08-06T23:29:56.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15861 - http://support.apple.com/kb/HT5016