CVE-2010-0516: Buffer Overflow
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that of the allocated heap chunk.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0516?
CVE-2010-0516 has a high severity because it allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2010-0516?
To fix CVE-2010-0516, update QuickTime to the latest version available for your Mac OS X.
What versions of Mac OS X are affected by CVE-2010-0516?
CVE-2010-0516 affects Mac OS X versions 10.6.0, 10.6.1, and 10.6.2.
Can CVE-2010-0516 be exploited with a specific file type?
Yes, CVE-2010-0516 can be exploited using a crafted movie file that utilizes RLE encoding.
What are the consequences of an attack exploiting CVE-2010-0516?
Exploiting CVE-2010-0516 may lead to memory corruption, allowing attackers to crash the application or execute arbitrary code.