Vulnerabilities > Apple > Imageio

DATE CVE VULNERABILITY TITLE RISK
2011-07-21 CVE-2011-0241 Buffer Errors vulnerability in Apple Imageio and Safari
Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with CCITT Group 4 encoding.
network
apple microsoft CWE-119
critical
9.3
2011-07-21 CVE-2011-0215 Improper Input Validation vulnerability in Apple Imageio and Safari
ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file.
network
apple microsoft CWE-20
critical
9.3
2011-06-24 CVE-2011-0205 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Imageio, mac OS X and mac OS X Server
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image.
network
apple CWE-119
6.8
2011-06-24 CVE-2011-0204 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Imageio, mac OS X and mac OS X Server
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image.
network
apple CWE-119
6.8
2011-03-23 CVE-2011-0194 Numeric Errors vulnerability in Apple Imageio, mac OS X and mac OS X Server
Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.
network
apple CWE-189
6.8
2011-03-23 CVE-2011-0181 Numeric Errors vulnerability in Apple Imageio, mac OS X and mac OS X Server
Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image.
network
apple CWE-189
6.8
2007-03-13 CVE-2007-0733 Applications Multiple vulnerability in Apple Mac OS X
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RAW image that triggers memory corruption.
network
apple
critical
9.3
2006-03-31 CVE-2006-1552 Numeric Errors vulnerability in Apple products
Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".
network
low complexity
apple CWE-189
5.0