CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0010

Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a crafted 0x77 Poly tag and a crafted length field, which triggers a heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.458

EPSS Ranking 97.5%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2009-0010

Apple » Mac Os X » Version: 10.4.11

cpe:2.3:o:apple:mac_os_x:10.4.11
Apple » Mac Os X » Version: 10.5

cpe:2.3:o:apple:mac_os_x:10.5
Apple » Mac Os X » Version: 10.5.0

cpe:2.3:o:apple:mac_os_x:10.5.0
Apple » Mac Os X » Version: 10.5.1

cpe:2.3:o:apple:mac_os_x:10.5.1
Apple » Mac Os X » Version: 10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.2
Apple » Mac Os X » Version: 10.5.3

cpe:2.3:o:apple:mac_os_x:10.5.3
Apple » Mac Os X » Version: 10.5.4

cpe:2.3:o:apple:mac_os_x:10.5.4
Apple » Mac Os X » Version: 10.5.5

cpe:2.3:o:apple:mac_os_x:10.5.5
Apple » Mac Os X » Version: 10.5.6

cpe:2.3:o:apple:mac_os_x:10.5.6
Apple » Mac Os X Server » Version: 10.4.11

cpe:2.3:o:apple:mac_os_x_server:10.4.11
Apple » Mac Os X Server » Version: 10.5

cpe:2.3:o:apple:mac_os_x_server:10.5
Apple » Mac Os X Server » Version: 10.5.0

cpe:2.3:o:apple:mac_os_x_server:10.5.0
Apple » Mac Os X Server » Version: 10.5.1

cpe:2.3:o:apple:mac_os_x_server:10.5.1
Apple » Mac Os X Server » Version: 10.5.2

cpe:2.3:o:apple:mac_os_x_server:10.5.2
Apple » Mac Os X Server » Version: 10.5.3

cpe:2.3:o:apple:mac_os_x_server:10.5.3
Apple » Mac Os X Server » Version: 10.5.4

cpe:2.3:o:apple:mac_os_x_server:10.5.4
Apple » Mac Os X Server » Version: 10.5.6

cpe:2.3:o:apple:mac_os_x_server:10.5.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0010

Products

Pricing

Contact Us