CVE-2010-0056: Buffer Overflow

Published Mar 30, 2010

Updated

Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

Affected Software

2 affected components

Apple iOS and macOS=10.5.8

Apple Mac OS X Server=10.5.8

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

Event History

Mar 30, 2010

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:30 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0056?

CVE-2010-0056 is classified as a high severity vulnerability due to its potential for remote code execution and denial of service.

How do I fix CVE-2010-0056?

To mitigate CVE-2010-0056, update your Apple Mac OS X to a version that resolves this buffer overflow vulnerability.

Which versions of macOS are affected by CVE-2010-0056?

CVE-2010-0056 affects Apple Mac OS X version 10.5.8 and Apple Mac OS X Server version 10.5.8.

What type of vulnerability is CVE-2010-0056?

CVE-2010-0056 is a buffer overflow vulnerability in the Cocoa spell checking feature of the AppKit.

Can CVE-2010-0056 be exploited without user interaction?

CVE-2010-0056 requires user interaction, as it exploits the system via crafted documents opened by the user.