CVE-2011-3450

Name: CVE-2011-3450
Creator: NVD / NIST
Published: 2012-02-02T18:55:01.237+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.45%

Last modified Jun 16, 2026

CVE-2011-3450 is a vulnerability of currently unknown severity. CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via a long URL.. EPSS estimates a 2.45% chance of exploitation in the next 30 days.

Description

CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via a long URL.

Metrics

EPSS Probability

2.45%

82.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-399

Affected Software

Vendor	Product	Versions
Apple	Mac Os X	10.7.0
Apple	Mac Os X	10.7.1
Apple	Mac Os X	10.7.2
Apple	Mac Os X Server	10.7.0
Apple	Mac Os X Server	10.7.1
Apple	Mac Os X Server	10.7.2

References

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlVendor Advisory
http://support.apple.com/kb/HT5130Vendor Advisory
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlVendor Advisory
http://support.apple.com/kb/HT5130Vendor Advisory

Timeline

Published: Feb 2, 2012
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2011-3450?

How severe is CVE-2011-3450?

Severity scoring for CVE-2011-3450 is pending analysis. The EPSS model estimates a 2.45% probability of exploitation in the next 30 days.

How do I fix CVE-2011-3450?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-3450?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST