Unrated severityNVD Advisory· Published Mar 3, 2011· Updated Jun 16, 2026
CVE-2011-0170
CVE-2011-0170
Description
Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
66cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*+ 65 more
- cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*range: <=10.1.2
- cpe:2.3:a:apple:itunes:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:10.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:10.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:10.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:8.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:9.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:9.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:9.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:9.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:9.2.1:*:*:*:*:*:*:*
- (no CPE)range: <10.2
Patches
Vulnerability mechanics
References
8- lists.apple.com/archives/security-announce/2011/Mar/msg00000.htmlnvdPatchVendor Advisory
- support.apple.com/kb/HT4554nvdVendor Advisory
- labs.idefense.com/intelligence/vulnerabilities/display.phpnvd
- lists.apple.com/archives/security-announce/2011//Mar/msg00004.htmlnvd
- lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlnvd
- support.apple.com/kb/HT4566nvd
- support.apple.com/kb/HT4581nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17367nvd
News mentions
0No linked articles in our index yet.