Executive Summary

Name CVE-2010-3787 First vendor Publication 2010-11-16
Vendor Cve Last vendor Modification 2010-12-18

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


Heap-based buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3787

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

Os 5
Os 5

OpenVAS Exploits

Date Description
2011-09-07 Name : Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007)
File : nvt/gb_macosx_su10-007.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
69313 Apple Mac OS X QuickTime Crafted JP2 Image Handling Overflow

Apple Mac OS X QuickTime is prone to an overflow condition. The QuickTime feature fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted JP2 image, a context-dependent attacker can potentially cause denial of service or allow execution of arbitrary code.

Nessus® Vulnerability Scanner

Date Description
2010-12-07 Name : The remote Mac OS X host contains an application that is affected by multiple...
File : macosx_Quicktime769.nasl - Type : ACT_GATHER_INFO
2010-12-07 Name : The remote Windows host contains an application that is affected by multiple ...
File : quicktime_769.nasl - Type : ACT_GATHER_INFO
2010-11-10 Name : The remote host is missing a Mac OS X update that fixes various security issues.
File : macosx_10_6_5.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
APPLE http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html
BID http://www.securityfocus.com/bid/44798
CERT-VN http://www.kb.cert.org/vuls/id/309873
CONFIRM http://support.apple.com/kb/HT4435
SECTRACK http://www.securitytracker.com/id?1024729

Alert History

If you want to see full details history, please login or register.
Date Informations
2021-05-04 12:12:35
  • Multiple Updates
2021-04-22 01:13:17
  • Multiple Updates
2020-05-23 00:26:40
  • Multiple Updates
2014-02-17 10:57:58
  • Multiple Updates
2013-05-10 23:34:40
  • Multiple Updates