CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2804

Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.092

EPSS Ranking 92.3%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2009-2804

Apple » Safari » Version: N/A

cpe:2.3:a:apple:safari:-
Apple » Safari » Version: 0.8

cpe:2.3:a:apple:safari:0.8
Apple » Safari » Version: 0.9

cpe:2.3:a:apple:safari:0.9
Apple » Safari » Version: 1.0

cpe:2.3:a:apple:safari:1.0
Apple » Safari » Version: 1.0.0

cpe:2.3:a:apple:safari:1.0.0
Apple » Safari » Version: 1.0.0b1

cpe:2.3:a:apple:safari:1.0.0b1
Apple » Safari » Version: 1.0.0b2

cpe:2.3:a:apple:safari:1.0.0b2
Apple » Safari » Version: 1.0.1

cpe:2.3:a:apple:safari:1.0.1
Apple » Safari » Version: 1.0.2

cpe:2.3:a:apple:safari:1.0.2
Apple » Safari » Version: 1.0.3

cpe:2.3:a:apple:safari:1.0.3
Apple » Safari » Version: 1.0b1

cpe:2.3:a:apple:safari:1.0b1
Apple » Safari » Version: 1.1

cpe:2.3:a:apple:safari:1.1
Apple » Safari » Version: 1.1.0

cpe:2.3:a:apple:safari:1.1.0
Apple » Safari » Version: 1.1.1

cpe:2.3:a:apple:safari:1.1.1
Apple » Safari » Version: 1.2

cpe:2.3:a:apple:safari:1.2
Apple » Safari » Version: 1.2.0

cpe:2.3:a:apple:safari:1.2.0
Apple » Safari » Version: 1.2.1

cpe:2.3:a:apple:safari:1.2.1
Apple » Safari » Version: 1.2.2

cpe:2.3:a:apple:safari:1.2.2
Apple » Safari » Version: 1.2.3

cpe:2.3:a:apple:safari:1.2.3
Apple » Safari » Version: 1.2.4

cpe:2.3:a:apple:safari:1.2.4
Apple » Safari » Version: 1.2.5

cpe:2.3:a:apple:safari:1.2.5
Apple » Safari » Version: 1.3

cpe:2.3:a:apple:safari:1.3
Apple » Safari » Version: 1.3.0

cpe:2.3:a:apple:safari:1.3.0
Apple » Safari » Version: 1.3.1

cpe:2.3:a:apple:safari:1.3.1
Apple » Safari » Version: 1.3.2

cpe:2.3:a:apple:safari:1.3.2
Apple » Safari » Version: 2

cpe:2.3:a:apple:safari:2
Apple » Safari » Version: 2.0

cpe:2.3:a:apple:safari:2.0
Apple » Safari » Version: 2.0.0

cpe:2.3:a:apple:safari:2.0.0
Apple » Safari » Version: 2.0.1

cpe:2.3:a:apple:safari:2.0.1
Apple » Safari » Version: 2.0.2

cpe:2.3:a:apple:safari:2.0.2
Apple » Safari » Version: 2.0.3

cpe:2.3:a:apple:safari:2.0.3
Apple » Safari » Version: 2.0.3_417.9.3

cpe:2.3:a:apple:safari:2.0.3_417.9.3
Apple » Safari » Version: 2.0.4

cpe:2.3:a:apple:safari:2.0.4
Apple » Safari » Version: 2.0.4_419.3

cpe:2.3:a:apple:safari:2.0.4_419.3
Apple » Safari » Version: 2.0_pre

cpe:2.3:a:apple:safari:2.0_pre
Apple » Safari » Version: 3

cpe:2.3:a:apple:safari:3
Apple » Safari » Version: 3.0

cpe:2.3:a:apple:safari:3.0
Apple » Safari » Version: 3.0.0

cpe:2.3:a:apple:safari:3.0.0
Apple » Safari » Version: 3.0.0b

cpe:2.3:a:apple:safari:3.0.0b
Apple » Safari » Version: 3.0.1

cpe:2.3:a:apple:safari:3.0.1
Apple » Safari » Version: 3.0.1b

cpe:2.3:a:apple:safari:3.0.1b
Apple » Safari » Version: 3.0.2

cpe:2.3:a:apple:safari:3.0.2
Apple » Safari » Version: 3.0.2b

cpe:2.3:a:apple:safari:3.0.2b
Apple » Safari » Version: 3.0.3

cpe:2.3:a:apple:safari:3.0.3
Apple » Safari » Version: 3.0.3b

cpe:2.3:a:apple:safari:3.0.3b
Apple » Safari » Version: 3.0.4

cpe:2.3:a:apple:safari:3.0.4
Apple » Safari » Version: 3.0.4_beta

cpe:2.3:a:apple:safari:3.0.4_beta
Apple » Safari » Version: 3.0.4b

cpe:2.3:a:apple:safari:3.0.4b
Apple » Safari » Version: 3.0.5

cpe:2.3:a:apple:safari:3.0.5
Apple » Safari » Version: 3.1

cpe:2.3:a:apple:safari:3.1
Apple » Safari » Version: 3.1.0

cpe:2.3:a:apple:safari:3.1.0
Apple » Safari » Version: 3.1.0b

cpe:2.3:a:apple:safari:3.1.0b
Apple » Safari » Version: 3.1.1

cpe:2.3:a:apple:safari:3.1.1
Apple » Safari » Version: 3.1.1b

cpe:2.3:a:apple:safari:3.1.1b
Apple » Safari » Version: 3.1.2

cpe:2.3:a:apple:safari:3.1.2
Apple » Safari » Version: 3.1.2b

cpe:2.3:a:apple:safari:3.1.2b
Apple » Safari » Version: 3.2

cpe:2.3:a:apple:safari:3.2
Apple » Safari » Version: 3.2.0

cpe:2.3:a:apple:safari:3.2.0
Apple » Safari » Version: 3.2.0b

cpe:2.3:a:apple:safari:3.2.0b
Apple » Safari » Version: 3.2.1

cpe:2.3:a:apple:safari:3.2.1
Apple » Safari » Version: 3.2.1b

cpe:2.3:a:apple:safari:3.2.1b
Apple » Safari » Version: 3.2.2

cpe:2.3:a:apple:safari:3.2.2
Apple » Safari » Version: 3.2.2b

cpe:2.3:a:apple:safari:3.2.2b
Apple » Safari » Version: 3.2.3

cpe:2.3:a:apple:safari:3.2.3
Apple » Safari » Version: 4.0

cpe:2.3:a:apple:safari:4.0
Apple » Safari » Version: 4.0.0b

cpe:2.3:a:apple:safari:4.0.0b
Apple » Safari » Version: 4.0.1

cpe:2.3:a:apple:safari:4.0.1
Apple » Safari » Version: 4.0.2

cpe:2.3:a:apple:safari:4.0.2
Apple » Safari » Version: 4.0.3

cpe:2.3:a:apple:safari:4.0.3
Apple » Mac Os X » Version: 10.4.11

cpe:2.3:o:apple:mac_os_x:10.4.11
Apple » Mac Os X » Version: 10.5.8

cpe:2.3:o:apple:mac_os_x:10.5.8
Apple » Mac Os X Server » Version: 10.4.11

cpe:2.3:o:apple:mac_os_x_server:10.4.11
Apple » Mac Os X Server » Version: 10.5.8

cpe:2.3:o:apple:mac_os_x_server:10.5.8
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-
Microsoft » Windows » Version: 1.0

cpe:2.3:o:microsoft:windows:1.0
Microsoft » Windows » Version: 2.0

cpe:2.3:o:microsoft:windows:2.0
Microsoft » Windows » Version: 2000

cpe:2.3:o:microsoft:windows:2000
Microsoft » Windows » Version: 3.0

cpe:2.3:o:microsoft:windows:3.0
Microsoft » Windows » Version: 3.1

cpe:2.3:o:microsoft:windows:3.1
Microsoft » Windows » Version: 3.11

cpe:2.3:o:microsoft:windows:3.11
Microsoft » Windows » Version: server_2008

cpe:2.3:o:microsoft:windows:server_2008
Microsoft » Windows » Version: vista

cpe:2.3:o:microsoft:windows:vista

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2804

Products

Pricing

Contact Us