Posted by ZDI Disclosures on Jun 29
ZDI-11-228: Apple ColorSync ICC Profile ncl2 Parsing Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-11-228
June 29, 2011
— CVE ID:
CVE-2011-0200
— CVSS:
7.5, (AV:N/AC:L/Au:N/C:P/I:P/A:P)
— Affected Vendors:
Apple
— Affected Products:
Apple Mail
Apple OS X
Apple Safari
— TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital…
Source: ZDI-11-228: Apple ColorSync ICC Profile ncl2 Parsing Remote Code Execution Vulnerability
