VULNERABILITY INTELLIGENCE

CVE-2011-0209

CVSS score6.8 MEDIUM

EPSS probability2.92%

CISA KEVNot currently listed

Published2011-06-24

Last modified2026-06-16

CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.

Weakness classification

CWE-190: Integer Overflow or Wraparound

Primary references

product-security@apple.com — Mailing List, Vendor Advisory
product-security@apple.com — Patch, Vendor Advisory
product-security@apple.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory