Apple Imageio vulnerabilities

8 CVEs affecting Apple Imageio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0241, published 2011-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0733, published 2007-03-13. High severity, CVSS 9.3. EPSS: 7.3% chance of exploitation in the next 30 days. Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to cause a denial of service (application crash) and possibly execute…
CVE-2011-0241, published 2011-07-21. High severity, CVSS 9.3. EPSS: 6.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with…
CVE-2011-0215, published 2011-07-21. High severity, CVSS 9.3. EPSS: 4.5% chance of exploitation in the next 30 days. ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2006-1552, published 2006-03-31. Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days. Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated…
CVE-2011-0204, published 2011-06-24. Medium severity, CVSS 6.8. EPSS: 3.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image.
CVE-2011-0205, published 2011-06-24. Medium severity, CVSS 6.8. EPSS: 3.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image.
CVE-2011-0181, published 2011-03-23. Medium severity, CVSS 6.8. EPSS: 2.8% chance of exploitation in the next 30 days. Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image.
CVE-2011-0194, published 2011-03-23. Medium severity, CVSS 6.8. EPSS: 2.5% chance of exploitation in the next 30 days. Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG…