Description
Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a heap-based buffer overflow.
References
- APPLE-SA-2009-11-11-1 vendor-advisory
- ADV-2009-3217 vdb-entry
- 36357 vdb-entry
- APPLE-SA-2009-09-10-2 vendor-advisory
- http://support.apple.com/kb/HT3949
- apple-macosx-colosync-bo(53166) vdb-entry
- http://support.apple.com/kb/HT3865
- 36701 third-party-advisory
- 57949 vdb-entry
- 37346 third-party-advisory