FKIE_CVE-2011-0170
Vulnerability from fkie_nvd - Published: 2011-03-03 20:00 - Updated: 2026-06-16 23:26
Severity
Summary
Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image.
References
Impacted products
{
"affected": [
{
"affectedData": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"source": "product-security@apple.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E40F7857-8F3F-4707-B3AA-A12C0731BB83",
"versionEndIncluding": "10.1.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5CBD58D1-C40D-4F6D-816F-A3842897EB05",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3C910CA4-5EA5-4507-BDE9-3E6C1434B666",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0415D4B8-0281-4ED5-B3A1-A97BDD0F8D36",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B1B4195D-1550-42D1-B562-0E438F7ACC2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C4B6A66A-AC5F-48E0-ABCE-68828207B106",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1206A192-A22C-4C55-A323-1D28D89BED21",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*",
"matchCriteriaId": "071BFB1F-402B-4D8C-8155-671792AEDB81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "52E156DE-12B4-4E7A-B8C4-C2FC0AC2B2C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "93748DFC-6003-4BED-87F9-98713F6897EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2A8873F1-4792-41A1-83B5-B85C9F4A7D56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DB84AFE4-2694-475A-80D3-4D50C524EE18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "BB20AA2E-5DF0-420C-A1FE-BB6EBA9649FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B48FDD0A-6DE5-44DD-B144-32B91DB26C7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8343D87F-FA37-4225-B27D-BCCDD2433C31",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B591AE1E-02DB-462A-B71F-48947525D232",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "34B5892B-0377-4D81-9E0E-94B8D8CE72C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2276BED4-82F0-4F62-AA6F-7E1667F28E3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "45D47548-1C4D-4368-99D1-929905DD6B3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "28AE8D2D-63CA-4091-9D59-CE919EB1FD75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "52A433A5-3EFF-405D-8285-97EC88857968",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "582D1FE8-C4E8-4385-B4EB-34320F019E43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AF61CE34-5130-4B1A-B7A2-B28C1A18B9BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6FEE6DEC-9B26-47F4-A2CF-CA49981C8864",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2223B8E2-346A-4C37-9F6C-879F9CA64C06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "93E5227C-0621-43EE-A0F2-4B4545D71852",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DB69B123-7A09-4855-9846-E8ACACB3C6F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C0CC53F2-3827-4CA3-8726-C481B57B4AB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7C1AFF8F-BBCA-4C93-A401-F8B478327BFE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "0BA3571F-9221-45CD-9798-CC72CA428D6A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "129ABCA4-FBF6-41B8-BF6B-65467D56D297",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "017E5A35-D778-46FD-A536-E57A13162675",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6122C685-4F02-476F-9A41-9C62D3D92651",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "17D37426-00A0-40E5-A27A-CF31D8CBAEEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3E11CADC-AFCC-4A98-9271-C35BC9752B40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "11F1530E-9E63-4A39-9056-3A946A34B650",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "3856A348-A0D6-4A0A-A8C9-D369CC863A97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "29E92D8D-68AB-4FC4-A37A-D6D48829B58D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "670656BF-2BE2-41ED-854A-466DC4068FBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FDE7F79F-54F5-4315-98BD-414CA2D1C51E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "DBBF2E9F-0F37-4DDA-9704-B31D94745257",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1143A4DE-F75B-4396-9D01-CE14EF8FCB39",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BDF87AB4-B3F3-4774-8CE3-A2B46C3D8DC5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A02D076B-5900-401D-9B47-5136B9CEAA15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7E479501-8832-41B0-A63C-360AE5A1B420",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F8961EDA-B567-4D92-8DBC-F887712F3BD2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A60A3349-DE6E-4381-81C0-E682B791ED61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6EF2759C-6F94-4769-8EB2-16947C05CBB3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B0F53FF4-8A15-475C-9FF6-54073A3F1B08",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "80AFD7E5-A66F-4E43-BC34-EB6BF59186D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E41B2E2A-CE22-49FD-9558-0E6C87F53425",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A1950796-DA96-4443-85F4-91FE38A26612",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E5EBED9A-DCF4-47FE-9A6D-4573594AA645",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3F7EA3F3-576C-4661-B35F-EC34CE363125",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1C3A6055-2626-4A6E-9596-9974E7437FB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "00AF4F28-A71C-4CB3-8F5F-C15500332954",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B5817849-ADD0-4905-87D5-4D61DB635747",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:10.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "96E90253-3F7D-4361-819B-5D49657F4472",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:10.1:*:*:*:*:*:*:*",
"matchCriteriaId": "84336EBA-5EC0-4C49-B1B9-9DAB23D5C3C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apple:itunes:10.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4CDE68E5-744B-4E18-BB74-83D7185E6A57",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
"matchCriteriaId": "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
"matchCriteriaId": "0A0D2704-C058-420B-B368-372D1129E914",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
"matchCriteriaId": "9B339C33-8896-4896-88FF-88E74FDBC543",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
"matchCriteriaId": "CE477A73-4EE4-41E9-8694-5A3D5DC88656",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer en memoria din\u00e1mica en ImageIO en CoreGraphics en iTunes de Apple antes de v10.2 en Windows permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n o causar una denegaci\u00f3n de servicio (bloqueo de aplicaci\u00f3n) a trav\u00e9s de un perfil manipulado International Color Consortium (ICC) en una imagen JPEG."
}
],
"id": "CVE-2011-0170",
"lastModified": "2026-06-16T23:26:56.400",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2011-03-03T20:00:02.597",
"references": [
{
"source": "product-security@apple.com",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=897"
},
{
"source": "product-security@apple.com",
"url": "http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html"
},
{
"source": "product-security@apple.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html"
},
{
"source": "product-security@apple.com",
"url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"
},
{
"source": "product-security@apple.com",
"tags": [
"Vendor Advisory"
],
"url": "http://support.apple.com/kb/HT4554"
},
{
"source": "product-security@apple.com",
"url": "http://support.apple.com/kb/HT4566"
},
{
"source": "product-security@apple.com",
"url": "http://support.apple.com/kb/HT4581"
},
{
"source": "product-security@apple.com",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17367"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=897"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://support.apple.com/kb/HT4554"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://support.apple.com/kb/HT4566"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://support.apple.com/kb/HT4581"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17367"
}
],
"sourceIdentifier": "product-security@apple.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…