<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2011-0241" target="_blank">CVE</a>)</em> : Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with CCITT Group 4 encoding.

Upgrade to version 5.1 or 5.0.6 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• CVE ID: 2011-0241 (see also: NVD)
• Secunia Advisory ID: 45325 46377 46415 47843
• Related OSVDB ID: 73989 73990 73991 73993 73994 73995 73996 73997 73998 73999 74000 74001 74002 74003 74004 74005 74006 74007 74008 74009 74010 74011 74012 74013 74014 74015 74016 74017 74018 74019
• Mail List Post: http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
  http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
  http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html
  http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
  http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
  http://seclists.org/bugtraq/2011/Oct/72
  http://seclists.org/bugtraq/2011/Oct/73
• Vendor Specific Advisory URL: http://support.apple.com/kb/HT4808
  http://support.apple.com/kb/HT4999
  http://support.apple.com/kb/HT5001/
• Vendor Specific News/Changelog Entry: http://support.apple.com/kb/HT5130
  http://support.apple.com/kb/HT5281
• News Article: http://www.computerworld.com/s/article/9218534/Apple_delivers_OS_X_Lion_to_Mac_App_Store_
  http://www.computerworld.com/s/article/9218549/Apple_patches_58_Safari_bugs_to_deflect_drive_by_attacks

Unknown or Incomplete