CVE-2011-0200: Buffer Overflow
Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image containing a crafted embedded ColorSync profile that triggers a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0200?
CVE-2011-0200 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2011-0200?
To fix CVE-2011-0200, users should update their Apple Mac OS X to version 10.6.8 or later.
What systems are affected by CVE-2011-0200?
CVE-2011-0200 affects various versions of Apple Mac OS X, specifically those prior to 10.6.8.
What kind of attack does CVE-2011-0200 facilitate?
CVE-2011-0200 facilitates remote attacks that can lead to arbitrary code execution or denial of service through crafted images.
How does CVE-2011-0200 trigger a buffer overflow?
CVE-2011-0200 triggers a heap-based buffer overflow due to an integer overflow in the ColorSync component when processing certain embedded profiles.