CVE-2011-1417: Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute…

Unscored severity · published Mar 11, 2011

CVE-2011-1417

Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute…

–

CVSS

5.5%

EPSS

On KEV

Description

Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a Microsoft Office document with a crafted size field in the OfficeArtMetafileHeader, related to OfficeArtBlip, as demonstrated on the iPhone by Charlie Miller and Dion Blazakis during a Pwn2Own competition at CanSecWest 2011.

Exploitation

Is it being used?

Exploit prediction (EPSS)5.5% · higher than 93% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

iOS · Apple

through 4.2.5; 1.0.0; 1.0.1; 1.0.2; 1.1.0; 1.1.1; +24 more · source: NVD

Mac OS X · Apple

through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more · source: NVD