CVE-2010-0517: Buffer Overflow
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields, but to use a different field to control the length of a copy operation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0517?
CVE-2010-0517 has a high severity rating due to its potential for remote code execution and denial of service.
How do I fix CVE-2010-0517?
To mitigate CVE-2010-0517, update to Apple Mac OS X 10.6.3 or later.
Which software versions are affected by CVE-2010-0517?
CVE-2010-0517 affects Apple Mac OS X versions 10.6.0, 10.6.1, and 10.6.2.
What type of exploit is associated with CVE-2010-0517?
CVE-2010-0517 is associated with a heap-based buffer overflow exploit involving crafted M-JPEG movie files.
Who can be affected by CVE-2010-0517?
Users of affected versions of Apple Mac OS X are at risk of exploitation from remote attackers.