NetSight
medium6.8

CVE-2011-3448

Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (applica…

Impact

Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.7.2
Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4
AppleMac Os X Server
through 10.7.2
Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4

Weakness classification

References