First published: Wed Mar 23 2011(Updated: )
Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | =10.6.3 | |
macOS Yosemite | <=10.6.6 | |
macOS Yosemite | =10.6.1 | |
macOS Yosemite | =10.6.0 | |
macOS Yosemite | =10.6.2 | |
macOS Yosemite | =10.6.4 | |
macOS Yosemite | =10.6.5 | |
Apple Mac OS X Server | =10.6.3 | |
Apple Mac OS X Server | <=10.6.6 | |
Apple Mac OS X Server | =10.6.4 | |
Apple Mac OS X Server | =10.6.5 | |
Apple Mac OS X Server | =10.6.1 | |
Apple Mac OS X Server | =10.6.2 | |
Apple Mac OS X Server | =10.6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-0180 has a low severity rating as it allows local users to read arbitrary files but does not allow remote exploitation.
To fix CVE-2011-0180, update your Mac OS X version to 10.6.7 or later.
CVE-2011-0180 affects local users of Apple Mac OS X versions prior to 10.6.7.
CVE-2011-0180 could allow reading of HFS, HFS+, or HFS+J files.
No, CVE-2011-0180 is not a remote vulnerability; it requires local access.