CVE-2011-0187: Infoleak
Published Mar 23, 2011
·Updated
The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect.
Affected Software
19 affected components
All of the following
Apple QuickTime<7.7.0
Any of the following
Apple iOS and macOS<10.6.7
Apple Mac OS X Server<10.6.7
Apple iOS and macOS<10.6.7
Apple iOS and macOS=10.6.3
Apple QuickTime
Apple iOS and macOS=10.6.6
Apple iOS and macOS=10.6.1
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.6.2
Apple iOS and macOS=10.6.4
Apple iOS and macOS=10.6.5
Apple Mac OS X Server=10.6.3
Apple Mac OS X Server=10.6.6
Apple Mac OS X Server=10.6.4
Apple Mac OS X Server=10.6.5
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.2
Apple Mac OS X Server=10.6.0
Remediation
Patch Available
Event History
Mar 23, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0187?
CVE-2011-0187 is considered a medium severity vulnerability that affects Apple's QuickTime.
2
How do I fix CVE-2011-0187?
To mitigate CVE-2011-0187, update to the latest version of QuickTime or Mac OS X that addresses this vulnerability.
3
What does CVE-2011-0187 exploit?
CVE-2011-0187 exploits a vulnerability in QuickTime that allows remote attackers to bypass the Same Origin Policy.
4
Which versions are affected by CVE-2011-0187?
CVE-2011-0187 affects multiple versions of Mac OS X prior to 10.6.7 and certain versions of QuickTime.
5
Can CVE-2011-0187 lead to data exposure?
Yes, CVE-2011-0187 can allow attackers to obtain potentially sensitive video data from the affected systems.