Apple Mac OS X CoreFoundation (CVE-2011-0259) Memory Corruption Vulnerability

Bugtraq ID:	50067
Class:	Unknown
CVE:	CVE-2011-0259
Remote:	Yes
Local:	No
Published:	Oct 11 2011 12:00AM
Updated:	Mar 19 2015 08:46AM
Credit:	Apple
Vulnerable:	Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac Os X Server 10.6.8 Apple Mac Os X Server 10.6.7 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.6 Apple iTunes 9.2.1 Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 9.2 Apple iTunes 9.1 Apple iTunes 8.2 Apple iTunes 8.1 Apple iTunes 8.0.2.20 Apple iTunes 8.0 Apple iTunes 10.2.2 Apple iTunes 10.2 Apple iTunes 10.1 Apple iTunes 10 Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4
Not Vulnerable:	Apple iTunes 10.5 Apple iOS 5

Apple Mac OS X CoreFoundation (CVE-2011-0259) Memory Corruption Vulnerability

Apple Mac OS X is prone to a memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Apple Mac OS X CoreFoundation (CVE-2011-0259) Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X CoreFoundation (CVE-2011-0259) Memory Corruption Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.


Apple Mac OS X Server 10.6.8

• Apple SecUpdSrvr2011-006.dmg
  http://www.apple.com/support/downloads/

Apple iTunes 10.2

• Apple APPLE-SA-2011-10-11-1 iTunes64Setup.exe
  For 64-bit Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2011-10-11-1 iTunesSetup.exe
  For Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/

Apple iTunes 10.1

• Apple APPLE-SA-2011-10-11-1 iTunes64Setup.exe
  For 64-bit Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2011-10-11-1 iTunesSetup.exe
  For Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/

Apple Mac OS X 10.6.8

• Apple SecUpd2011-006Snow.dmg
  http://www.apple.com/support/downloads/

Apple iTunes 10.2.2

• Apple APPLE-SA-2011-10-11-1 iTunes64Setup.exe
  For 64-bit Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2011-10-11-1 iTunesSetup.exe
  For Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/

Apple iTunes 10

• Apple APPLE-SA-2011-10-11-1 iTunes64Setup.exe
  For 64-bit Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2011-10-11-1 iTunesSetup.exe
  For Windows XP / Vista / Windows 7
  http://www.apple.com/itunes/download/

Apple Mac OS X CoreFoundation (CVE-2011-0259) Memory Corruption Vulnerability

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)