CVE-2011-1417
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.5%
Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a Microsoft Office document with a crafted size field in the OfficeArtMetafileHeader, related to OfficeArtBlip, as demonstrated on the iPhone by Charlie Miller and Dion Blazakis during a Pwn2Own competition at CanSecWest 2011.
Produtos afetados
n/a · n/aReferências
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2011//Apr/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlhttp://lists.apple.com/archives/Security-announce/2011//Oct/msg00005.htmlhttp://secunia.com/advisories/44154http://support.apple.com/kb/HT4581http://support.apple.com/kb/HT4607http://support.apple.com/kb/HT5003http://www.zdnet.com/blog/security/charlie-miller-wins-pwn2own-again-with-iphone-4-exploit/8378http://www.zerodayinitiative.com/advisories/ZDI-11-109/