Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Apple macOS <10.7.3 lets attackers run code via graphics

CVE-2011-3457 · published 14 years ago
Summary

Versions of Apple macOS and macOS Server earlier than 10.7.3 have a flaw in the way they compile graphics shader programs. An attacker who can send a specially crafted graphics program could cause the system to run unwanted code or crash the application. Update the operating system to macOS 10.7.3 or later to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple mac_os_x <= 10.7.2
10.6.0
10.6.1
10.6.2
10.6.3
10.6.4
10.6.5
10.6.6
10.6.7
10.6.8
10.7.0
10.7.1
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
apple mac_os_x_server <= 10.7.2
10.6.0
10.6.1
10.6.2
10.6.3
10.6.4
10.6.5
10.6.6
10.6.7
10.6.8
10.7.0
10.7.1
cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*
Original advisory text
The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remote attackers to execute arbitrary code or cause ...
The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted program.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published2 Feb 2012
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-3457 · NVD
Track software like this
Free during beta