VULNERABILITY INTELLIGENCE

CVE-2011-0186

CVSS score4.3 MEDIUM

EPSS probability2.61%

CISA KEVNot currently listed

Published2011-03-23

Last modified2026-06-16

CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.

Weakness classification

CWE-787: Out-of-bounds Write

Primary references

product-security@apple.com — Mailing List, Vendor Advisory
product-security@apple.com — Patch, Vendor Advisory
product-security@apple.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory