CVE-2011-1417

Related Files

Apple Security Advisory 2011-10-12-5

Posted Oct 13, 2011

Authored by Apple | Site apple.com

Apple Security Advisory 2011-10-12-5 - Pages for iOS version 1.5 is now available and addresses an arbitrary code execution vulnerability.

tags | advisory, arbitrary, code execution

systems | cisco, apple

advisories | CVE-2011-1417

SHA-256 | 266ef02de7f6041b775e847d47f1381e09f83e7fc41a3cf6e1d001241a8a0efb

Download | Favorite | View

Apple Security Advisory 2011-07-20-2

Posted Jul 25, 2011

Authored by Apple | Site apple.com

Apple Security Advisory 2011-07-20-2 - An iWork 9.1 update addresses multiple security issues. A buffer overflow existed in the handling of Excel files. Opening a maliciously crafted Excel file in Numbers may lead to an unexpected application termination or arbitrary code execution. A memory corruption issue existed in the handling of Excel files. Opening a maliciously crafted Excel file in Numbers may lead to an unexpected application termination or arbitrary code execution. A memory corruption issue existed in the handling of Microsoft Word documents. Opening a maliciously crafted Microsoft Word document in Pages may lead to an unexpected application termination or arbitrary code execution.

tags | advisory, overflow, arbitrary, code execution

systems | apple

advisories | CVE-2010-3785, CVE-2010-3786, CVE-2011-1417

SHA-256 | a73deccbc64afb80a87bd72b01aefd8124e910e61fa03497792581196667db65

Download | Favorite | View

Zero Day Initiative Advisory 11-109

Posted Mar 22, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-109 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari on the iPhone. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the support for parsing Office files. When handling the OfficeArtMetafileHeader the process trusts the cbSize field and performs arithmetic on it before making an allocation. As the result is not checked for overflow, the subsequent allocation can be undersized. Later when copying into this buffer, memory can be corrupted leading to arbitrary code execution under the context of the mobile user on the iPhone.

tags | advisory, remote, overflow, arbitrary, code execution

systems | apple, iphone

advisories | CVE-2011-1417

SHA-256 | 0581a4c68f5e63d36a00736efee38f3d2bb3ee49ea8fb2e43d4cdad83da323dc

Download | Favorite | View