CVE-2010-3791: Buffer Overflow

Published Nov 16, 2010

Updated

Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG movie file.

Affected Software

11 affected components

Apple QuickTime

Apple iOS and macOS=10.6.0

Apple iOS and macOS=10.6.1

Apple iOS and macOS=10.6.2

Apple iOS and macOS=10.6.3

Apple iOS and macOS=10.6.4

Apple Mac OS X Server=10.6.0

Apple Mac OS X Server=10.6.1

Apple Mac OS X Server=10.6.2

Apple Mac OS X Server=10.6.3

Apple Mac OS X Server=10.6.4

Remediation

Patch Available

http://support.apple.com/kb/HT4435

Event History

Nov 16, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

10:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-3791?

CVE-2010-3791 is classified as a high-severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2010-3791?

To fix CVE-2010-3791, it is essential to update Apple QuickTime to the latest version provided by Apple, specifically version 10.6.5 or later.

What platforms are affected by CVE-2010-3791?

CVE-2010-3791 affects Apple QuickTime on Mac OS X 10.6.x systems prior to 10.6.5.

What type of attack does CVE-2010-3791 exploit?

CVE-2010-3791 exploits a buffer overflow vulnerability through crafted MPEG movie files to crash the application or execute arbitrary code.

Is there a workaround for CVE-2010-3791?

There are no reliable workarounds for CVE-2010-3791; the best mitigation is to apply the security update.