CVE-2011-0344

Related Files

iDEFENSE Security Advisory 2011-03-01.1

Posted Mar 3, 2011

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 03.01.11 - Remote exploitation of a heap memory corruption vulnerability in Apple Inc.'s CoreGraphics library could allow an attacker to execute arbitrary code with the privileges of the current user. This vulnerability occurs during the processing of an embedded International Color Consortium (ICC) profile within a JPEG image. A small block of heap memory may be allocated for processing certain profile data. An index value is used to reference locations within this heap block. The index value can be manipulated in a manner that results in multiple memory writes to locations outside the bounds of the heap allocated block. This condition may lead to arbitrary code execution.

tags | advisory, remote, web, overflow, arbitrary, cgi, php

advisories | CVE-2011-0344

SHA-256 | 4e6d4aaf9f71ed1c8a1178ef8f377208f6f46c21421673d0d8e75e0af039ce4a

Download | Favorite | View