Sign-up

ID

VAR-201011-0220


CVE

CVE-2010-1845


TITLE

Apple Mac OS X of ImageIO Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2010-002423

DESCRIPTION

ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PSD image. An attacker could exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. These issues affect Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X 10.6 to 10.6.4 and Mac OS X Server 10.6 to 10.6.4. NOTE: This was previously covered in BID 44778 (Apple Mac OS X Prior to 10.6.5 Multiple Security Vulnerabilities), but has been given its own record to better document it. ImageIO PSD Memory Corruption - CVE-2010-1845 11/11/2010 Dominic Chell of NGS Secure has discovered a high risk memory corruption vulnerability affecting the ImageIO rendering framework. This issue can be remotely (client-side) exploited through any application using the framework including Mail, Safari and QuickLook. The announcement of this patch can be found here: http://support.apple.com/kb/HT1222 Patches can be downloaded from the following links. Apple security updates are available via the Software Update mechanism: http://support.apple.com/kb/HT1338 Apple security updates are also available for manual download via: http://www.apple.com/support/downloads/ NGS Secure are going to withhold details about these flaws for three months. Full details will be published on 11/02/2011. This three month window will allow Apple customers the time needed to test and apply the patch set before the details are released to the general public. This reflects NGS Secure's approach to responsible disclosure. NGS Secure Research http://www.ngssecure.com/ ________________________________ Dominic Chell Senior Security Consultant NGS Secure 52 Throwley Way Sutton, SM1 4BF Telephone: +44 (0)208 401 0070 Mobile: +44 (0)7545502538 Fax: Website: www.ngssecure.com Email: Dominic.Chell@ngssecure.com<mailto:Dominic.Chell@ngssecure.com> [http://www.nccgroup.com/_client/images/global/NGS%20Secure.jpg] <http://www.ngssecure.com/> ________________________________ This email is sent for and on behalf of NGS Secure Limited (Registered in England CRN: 04474600). The ultimate holding company is NCC Group plc (Registered in England CRN: 4627044). Registered Office: Manchester Technology Centre, Oxford Road, Manchester, M1 7EF Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than NCC Group or the sender of its existence. For more information about NGS Secure please visit www.ngssecure.com<http://www.ngssecure.com> P Before you print think about the ENVIRONMENT

Trust: 2.07

sources: NVD: CVE-2010-1845 // JVNDB: JVNDB-2010-002423 // BID: 44819 // VULHUB: VHN-44450 // PACKETSTORM: 96031

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:eqversion:10.6.2

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.6.4

Trust: 1.6

vendor:applemodel:mac os x serverscope:eqversion:10.6.2

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.6.1

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.5.8

Trust: 1.6

vendor:applemodel:mac os x serverscope:eqversion:10.6.3

Trust: 1.6

vendor:applemodel:mac os x serverscope:eqversion:10.6.4

Trust: 1.6

vendor:applemodel:mac os x serverscope:eqversion:10.6.1

Trust: 1.6

vendor:applemodel:mac os x serverscope:eqversion:10.5.8

Trust: 1.6

vendor:applemodel:mac os x serverscope:eqversion:10.6.0

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.6.3

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.6.0

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:v10.5.8

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:v10.6 to v10.6.4

Trust: 0.8

vendor:applemodel:mac os x serverscope:eqversion:v10.5.8

Trust: 0.8

vendor:applemodel:mac os x serverscope:eqversion:v10.6 to v10.6.4

Trust: 0.8

vendor:applemodel:mac os serverscope:eqversion:x10.6.4

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.3

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.2

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.1

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5.8

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.3

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.2

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.1

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.8

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6

Trust: 0.3

vendor:applemodel:mac os serverscope:neversion:x10.6.5

Trust: 0.3

vendor:applemodel:mac osscope:neversion:x10.6.5

Trust: 0.3

sources: BID: 44819 // JVNDB: JVNDB-2010-002423 // CNNVD: CNNVD-201011-166 // NVD: CVE-2010-1845

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2010-1845
value: MEDIUM

Trust: 1.0

NVD: CVE-2010-1845
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201011-166
value: MEDIUM

Trust: 0.6

VULHUB: VHN-44450
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2010-1845
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-44450
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-44450 // JVNDB: JVNDB-2010-002423 // CNNVD: CNNVD-201011-166 // NVD: CVE-2010-1845

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-44450 // JVNDB: JVNDB-2010-002423 // NVD: CVE-2010-1845

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201011-166

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201011-166

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2010-002423

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-44450

PATCH
title:HT4435url:http://support.apple.com/kb/HT4435
Trust: 0.8
title:HT4435url:http://support.apple.com/kb/HT4435?viewlocale=ja_JP
Trust: 0.8
title:MacOSXUpdCombo10.6.5url:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=35034
Trust: 0.6
title:MacOSXUpd10.6.5url:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=35033
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2010-002423 // 
            
            
            
            CNNVD: CNNVD-201011-166

EXTERNAL IDS
db:NVDid:CVE-2010-1845
Trust: 2.9
db:SECTRACKid:1024723
Trust: 1.1
db:JVNDBid:JVNDB-2010-002423
Trust: 0.8
db:CNNVDid:CNNVD-201011-166
Trust: 0.7
db:APPLEid:APPLE-SA-2010-11-10-1
Trust: 0.6
db:BIDid:44819
Trust: 0.4
db:PACKETSTORMid:96031
Trust: 0.2
db:VULHUBid:VHN-44450
Trust: 0.1
sources:
            
            
            VULHUB: VHN-44450 // 
            
            
            
            BID: 44819 // 
            
            
            
            JVNDB: JVNDB-2010-002423 // 
            
            
            
            PACKETSTORM: 96031 // 
            
            
            
            CNNVD: CNNVD-201011-166 // 
            
            
            
            NVD: CVE-2010-1845

REFERENCES
url:http://lists.apple.com/archives/security-announce/2010//nov/msg00000.html
Trust: 1.7
url:http://support.apple.com/kb/ht4435
Trust: 1.7
url:http://www.securityfocus.com/archive/1/514867/100/0/threaded
Trust: 1.1
url:http://www.securitytracker.com/id?1024723
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1845
Trust: 0.8
url:http://jvn.jp/cert/jvnvu331391
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-1845
Trust: 0.8
url:http://www.apple.com/macosx/
Trust: 0.3
url:http://www.securityfocus.com/advisories/20899
Trust: 0.3
url:http://www.ngssecure.com/>
Trust: 0.1
url:http://www.apple.com/support/downloads/
Trust: 0.1
url:http://www.ngssecure.com/
Trust: 0.1
url:http://www.ngssecure.com>
Trust: 0.1
url:http://www.nccgroup.com/_client/images/global/ngs%20secure.jpg]
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2010-1845
Trust: 0.1
url:https://www.ngssecure.com<http://www.ngssecure.com>
Trust: 0.1
url:http://support.apple.com/kb/ht1222
Trust: 0.1
url:http://support.apple.com/kb/ht1338
Trust: 0.1
sources:
            
            
            VULHUB: VHN-44450 // 
            
            
            
            BID: 44819 // 
            
            
            
            JVNDB: JVNDB-2010-002423 // 
            
            
            
            PACKETSTORM: 96031 // 
            
            
            
            CNNVD: CNNVD-201011-166 // 
            
            
            
            NVD: CVE-2010-1845

CREDITS
Dominic Chell of NGSSoftware.
Trust: 0.3
sources:
            
            
            BID: 44819

SOURCES
db:VULHUBid:VHN-44450
db:BIDid:44819
db:JVNDBid:JVNDB-2010-002423
db:PACKETSTORMid:96031
db:CNNVDid:CNNVD-201011-166
db:NVDid:CVE-2010-1845

LAST UPDATE DATE
2025-04-11T20:31:53.811000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-44450date:2018-10-10T00:00:00
db:BIDid:44819date:2010-11-10T00:00:00
db:JVNDBid:JVNDB-2010-002423date:2010-11-30T00:00:00
db:CNNVDid:CNNVD-201011-166date:2010-11-18T00:00:00
db:NVDid:CVE-2010-1845date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-44450date:2010-11-16T00:00:00
db:BIDid:44819date:2010-11-10T00:00:00
db:JVNDBid:JVNDB-2010-002423date:2010-11-30T00:00:00
db:PACKETSTORMid:96031date:2010-11-22T12:01:01
db:CNNVDid:CNNVD-201011-166date:2010-11-18T00:00:00
db:NVDid:CVE-2010-1845date:2010-11-16T22:00:15.710