Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3420 State: PUBLISHED Published: 2011-09-10T00:00:00 Last Updated: 2024-08-06T23:37:47.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.157 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/69729 - http://googlechromereleases.blogspot.com/2011/09/beta-channel-update-for-chromebooks_06.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14032 - http://osvdb.org/75377
CVE ID: CVE-2011-3421 State: PUBLISHED Published: 2011-09-10T00:00:00 Last Updated: 2024-08-06T23:37:47.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.125 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13853 - http://osvdb.org/75378 - http://googlechromereleases.blogspot.com/2011/09/beta-channel-update-for-chromebooks.html
CVE ID: CVE-2011-3422 State: PUBLISHED Published: 2011-09-10T00:00:00 Last Updated: 2024-08-06T23:37:47.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated by https access with Safari. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49429 - http://support.apple.com/kb/HT5130 - http://www.securitytracker.com/id?1026002 - http://www.computerw
us.com/bid/49429 - http://support.apple.com/kb/HT5130 - http://www.securitytracker.com/id?1026002 - http://www.computerworld.com/s/article/9219669/Mac_OS_X_can_t_properly_revoke_dodgy_digital_certificates - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69556
CVE ID: CVE-2011-3423 State: PUBLISHED Published: 2011-09-17T10:00:00 Last Updated: 2024-08-06T23:37:47.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45976 - http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp - http://www.tib
advisories/45976 - http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp - http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt - http://securitytracker.com/id?1026051 - http://www.securityfocus.com/bid/49619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69806 - http://www.osvdb.org/75396
CVE ID: CVE-2011-3424 State: PUBLISHED Published: 2011-09-17T10:00:00 Last Updated: 2024-08-06T23:37:47.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45976 - http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp - http://www.tibco.com/multimedia/mft-slin
www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp - http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt - http://securitytracker.com/id?1026051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69805 - http://www.osvdb.org/75397 - http://www.securityfocus.com/bid/49619
CVE ID: CVE-2011-3426 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70558 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT4999 - http:
- http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT4999 - http://osvdb.org/76334 - http://support.apple.com/kb/HT5400 - http://seclists.org/fulldisclosure/2014/Jul/158 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000088 - http://jvn.jp/en/jp/JVN41657660/index.html
CVE ID: CVE-2011-3427 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://osvdb.org/76326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70547 - http://lists.appl
/msg00001.html - http://osvdb.org/76326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70547 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5001 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html
CVE ID: CVE-2011-3428 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-08-06T23:37:47.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT5016
CVE ID: CVE-2011-3429 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, which might allow physically proximate attackers to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76331 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://support.apple.com/kb/HT4999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70559
CVE ID: CVE-2011-3430 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70560 - http://support.apple.com/kb/HT4999 - http://osvdb.org/76330
CVE ID: CVE-2011-3431 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://osvdb.org/76327 - http://support.apple.com/kb/HT4999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70554
CVE ID: CVE-2011-3432 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://osvdb.org/76335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70561 - http://support.apple.com/kb/HT4999
CVE ID: CVE-2011-3433 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:09.659Z Description: No description available.
CVE ID: CVE-2011-3434 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76354 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://support.apple.com/kb/HT4999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70562
CVE ID: CVE-2011-3435 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70584 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085 - http://osvdb.org/76369
CVE ID: CVE-2011-3436 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://osvdb.org/76370 - http://support.apple.com/kb/HT5002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70585 - http://www
org/76370 - http://support.apple.com/kb/HT5002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70585 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3437 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:37:47.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76356 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70571 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3438 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-08-06T23:37:47.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process crash) or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4808
CVE ID: CVE-2011-3439 State: PUBLISHED Published: 2011-11-11T18:00:00 Last Updated: 2024-08-06T23:37:47.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html - http://lists.apple.com/archives/Security-announce/20
sts.opensuse.org/opensuse-security-announce/2012-01/msg00012.html - http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html - http://support.apple.com/kb/HT5052 - http://secunia.com/advisories/46921 - http://secunia.com/advisories/48951
CVE ID: CVE-2011-3440 State: PUBLISHED Published: 2011-11-11T18:00:00Z Last Updated: 2024-09-16T19:09:29.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html - http://support.apple.com/kb/HT5052
CVE ID: CVE-2011-3441 State: PUBLISHED Published: 2011-11-11T18:00:00 Last Updated: 2024-08-06T23:37:47.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html - http://support.apple.com/kb/HT5052
CVE ID: CVE-2011-3442 State: PUBLISHED Published: 2011-11-11T18:00:00 Last Updated: 2024-08-06T23:37:47.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026287 - http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html - http://support.apple.com/kb/HT5052
CVE ID: CVE-2011-3443 State: PUBLISHED Published: 2012-03-02T00:00:00Z Last Updated: 2024-09-16T17:02:55.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors related to improper list management for Cascading Style Sheets (CSS) @font-face rules. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4808 - http://www.verisigninc.com/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/artic
/www.verisigninc.com/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=962
CVE ID: CVE-2011-3444 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-17T02:32:35.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3445 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:10.048Z Description: No description available.
CVE ID: CVE-2011-3446 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-16T18:04:19.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font that is accessed by Font Book. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130
CVE ID: CVE-2011-3447 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-17T00:26:30.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3448 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-16T16:12:47.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3449 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-17T02:41:11.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3450 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-17T03:33:56.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3451 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:10.423Z Description: No description available.
CVE ID: CVE-2011-3452 State: PUBLISHED Published: 2012-02-02T18:00:00Z Last Updated: 2024-09-16T19:25:52.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password for a Wi-Fi network. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3453 State: PUBLISHED Published: 2012-02-02T18:00:00 Last Updated: 2024-08-06T23:37:47.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via crafted DNS data. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://www.securitytracker.com/id?1026774 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://secunia.com/advisories/48289 - http://lists.apple.com/archives/security-announce/2012/Mar/msg0
eb/msg00000.html - http://secunia.com/advisories/48289 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00002.html - http://secunia.com/advisories/48288 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html
CVE ID: CVE-2011-3454 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:10.802Z Description: No description available.
CVE ID: CVE-2011-3455 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:11.170Z Description: No description available.
CVE ID: CVE-2011-3456 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:11.533Z Description: No description available.
CVE ID: CVE-2011-3457 State: PUBLISHED Published: 2012-02-02T18:00:00 Last Updated: 2024-08-06T23:37:47.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted program. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/secu
03.html - http://support.apple.com/kb/HT5503 - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE ID: CVE-2011-3458 State: PUBLISHED Published: 2012-02-02T18:00:00 Last Updated: 2024-08-06T23:37:47.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://support.apple.com/kb/HT5261 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.apple.com/archives/security-announce/2012/May/msg00005.html
CVE ID: CVE-2011-3459 State: PUBLISHED Published: 2012-02-02T18:00:00 Last Updated: 2024-08-06T23:37:47.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf atom in a movie file that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://support.apple.com/kb/HT5261 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://lists.apple.com/archives/security-announce/2012/May/msg00005.html