CVE-2011-3459: Buffer Overflow
Published Feb 2, 2012
·Updated
Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf atom in a movie file that triggers a buffer overflow.
Affected Software
24 affected components
Apple iOS and macOS=10.6.8
Apple iOS and macOS=10.6.7
Apple Mac OS X Server<=10.7.2
Apple Mac OS X Server=10.7.1
Apple Mac OS X Server=10.6.3
Apple Mac OS X Server=10.6.8
Apple Mac OS X Server=10.6.6
Apple iOS and macOS=10.6.3
Apple Mac OS X Server=10.6.4
Apple iOS and macOS=10.6.6
Apple Mac OS X Server=10.6.7
Apple Mac OS X Server=10.6.5
Apple Mac OS X Server=10.7.0
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.2
Apple iOS and macOS=10.6.1
Apple Mac OS X Server=10.6.0
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.6.2
Apple iOS and macOS=10.7.0
Apple iOS and macOS=10.6.4
Apple iOS and macOS=10.6.5
Apple iOS and macOS<=10.7.2
Apple iOS and macOS=10.7.1
Event History
Feb 2, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3459?
CVE-2011-3459 has a severity rating that allows remote attackers to execute arbitrary code or cause a denial of service.
2
How do I fix CVE-2011-3459?
To fix CVE-2011-3459, update your macOS to version 10.7.3 or later.
3
What systems are affected by CVE-2011-3459?
CVE-2011-3459 affects various versions of macOS, including 10.6.0 to 10.7.2.
4
What type of vulnerability is CVE-2011-3459?
CVE-2011-3459 is an off-by-one error that leads to a buffer overflow in QuickTime.
5
Can CVE-2011-3459 be exploited through movie files?
Yes, CVE-2011-3459 can be exploited by attackers through crafted rdrf atoms in movie files.