CVE-2009-0010: Buffer Overflow
Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a crafted 0x77 Poly tag and a crafted length field, which triggers a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0010?
CVE-2009-0010 has a critical severity rating as it allows remote attackers to execute arbitrary code or cause application crashes.
How do I fix CVE-2009-0010?
To fix CVE-2009-0010, update the affected software to Apple QuickTime version 7.6.2 or later and Mac OS X to version 10.5.7 or later.
Which versions are affected by CVE-2009-0010?
CVE-2009-0010 affects Apple Mac OS X versions 10.4.11 and 10.5 prior to 10.5.7, as well as earlier versions of QuickTime before 7.6.2.
What types of attacks can CVE-2009-0010 facilitate?
CVE-2009-0010 can facilitate remote code execution and denial of service attacks through specially crafted PICT images.
What is the impact of CVE-2009-0010?
The impact of CVE-2009-0010 includes potential arbitrary code execution and crashes of the affected applications.