|
|
|
|
| |
Credit:
The information has been provided by Tobias Klein, working with VeriSign iDefense Labs.
The original article can be found at: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-3786
|
| |
Vulnerable Systems:
* Apple iWork 9.0 through 9.0.5
Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a Microsoft Office document with a crafted size field in the OfficeArtMetafileHeader, related to OfficeArtBlip, as demonstrated on the iPhone by Charlie Miller and Dion Blazakis during a Pwn2Own competition at CanSecWest 2011.
Vendor Status:
Apple has issued an update to correct this vulnerability
Patch Availability:
http://support.apple.com/kb/HT4830
CVE Information:
Comments on CVE-2010-3786: |
|
|
|
|
