CVE-2011-0211: Integer Overflow
Published Jun 24, 2011
·Updated
Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
Affected Software
22 affected components
All of the following
Apple QuickTime<7.7.0
Any of the following
Apple iOS and macOS>=10.6.0<10.6.8
Apple Mac OS X Server>=10.6.0<10.6.8
Apple iOS and macOS>=10.6.0<10.6.8
Apple iOS and macOS=10.6.7
Apple iOS and macOS=10.6.3
Apple QuickTime
Apple iOS and macOS=10.6.6
Apple iOS and macOS=10.6.1
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.6.2
Apple iOS and macOS=10.6.4
Apple iOS and macOS=10.6.5
Apple Mac OS X Server=10.6.3
Apple Mac OS X Server=10.6.6
Apple Mac OS X Server=10.6.4
Apple Mac OS X Server=10.6.7
Apple Mac OS X Server=10.6.5
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.2
Apple Mac OS X Server=10.6.0
Apple QuickTime
Remediation
Patch Available
Event History
Jun 24, 2011
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0211?
CVE-2011-0211 has a high severity due to its potential to allow remote code execution or cause denial of service.
2
How do I fix CVE-2011-0211?
To fix CVE-2011-0211, update your QuickTime and Mac OS X to the latest versions available.
3
Which versions of Mac OS X are affected by CVE-2011-0211?
CVE-2011-0211 affects Mac OS X versions prior to 10.6.8, including 10.6.0 through 10.6.7.
4
What kind of attack can be executed via CVE-2011-0211?
CVE-2011-0211 can be exploited by attackers through crafted movie files to execute arbitrary code or crash applications.
5
Is Apple QuickTime Player vulnerable to CVE-2011-0211?
Yes, Apple QuickTime Player is vulnerable to CVE-2011-0211 in the affected versions of Mac OS X.