PT-2008-2635 · Apple · Macos X

Paul Haddad · Publicado 2008-06-02 · Atualizado 2017-08-08 · CVE-2008-1034

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.5

Description The issue is related to an integer underflow in the Help Viewer component, which can be triggered by a crafted help:topic URL. This can lead to a buffer overflow, allowing remote attackers to execute arbitrary code or cause the application to crash.

Recommendations For versions prior to 10.5, update to version 10.5 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-1034

Produtos afetados

Macos X

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-1034 · Nota de Segurança
• http://vupen.com/english/advisories/2008/1697 · Aviso do Fabricante
• http://securityfocus.com/bid/29412 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42716 · Nota
• http://securitytracker.com/id?1020138 · Nota
• http://secunia.com/advisories/30430 · Aviso do Fabricante
• http://securityfocus.com/bid/29483 · Nota
• http://us-cert.gov/cas/techalerts/TA08-150A.html · Nota
• http://lists.apple.com/archives/security-announce/2008//May/msg00001.html · Aviso do Fabricante
• http://kb.cert.org/vuls/id/566875 · Nota