CVE-2010-3794: Buffer Overflow

Published Nov 16, 2010

Updated

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.

Affected Software

10 affected components

Apple iOS and macOS=10.6.3

Apple iOS and macOS=10.6.1

Apple iOS and macOS=10.6.0

Apple iOS and macOS=10.6.2

Apple iOS and macOS=10.6.4

Apple Mac OS X Server=10.6.3

Apple Mac OS X Server=10.6.4

Apple Mac OS X Server=10.6.1

Apple Mac OS X Server=10.6.2

Apple Mac OS X Server=10.6.0

Remediation

Patch Available

http://support.apple.com/kb/HT4435

Event History

Nov 16, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3794?

CVE-2010-3794 has a high severity rating due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2010-3794?

To fix CVE-2010-3794, users should upgrade their Mac OS X to version 10.6.5 or later.

What types of software are affected by CVE-2010-3794?

CVE-2010-3794 affects Apple Mac OS X versions 10.6.0 through 10.6.4 and Apple Mac OS X Server versions within the same range.

What type of attack can be executed using CVE-2010-3794?

CVE-2010-3794 allows attackers to carry out code execution attacks or cause application crashes through crafted FlashPix files.

Can CVE-2010-3794 lead to data loss?

Yes, exploiting CVE-2010-3794 can result in a denial of service, potentially leading to data loss during application crashes.