CVE-2011-0173 - Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in a dialog in an AppleScript Studio application

Back Back to CVE browser

MEDIUM

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in a dialog in an AppleScript Studio application

Published Mar 23, 2011

6.8

MEDIUM

CVSS 2.0

EPSS 1.76%

Description

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in a dialog in an AppleScript Studio application.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-134

References (3)

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://support.apple.com/kb/HT4581
x_refsource_CONFIRMPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0199
Advisory

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html		vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://support.apple.com/kb/HT4581		x_refsource_CONFIRMPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0199		Advisory