PT-2008-2635 · Apple · Macos X

Paul Haddad · Published 2008-06-02 · Updated 2017-08-08 · CVE-2008-1034

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.5

Description The issue is related to an integer underflow in the Help Viewer component, which can be triggered by a crafted help:topic URL. This can lead to a buffer overflow, allowing remote attackers to execute arbitrary code or cause the application to crash.

Recommendations For versions prior to 10.5, update to version 10.5 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-1034

Affected Products

Macos X

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-1034 · Security Note
• http://vupen.com/english/advisories/2008/1697 · Vendor Advisory
• http://secunia.com/advisories/30430 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008//May/msg00001.html · Vendor Advisory
• http://securityfocus.com/bid/29412 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42716 · Note
• http://securitytracker.com/id?1020138 · Note
• http://securityfocus.com/bid/29483 · Note
• http://us-cert.gov/cas/techalerts/TA08-150A.html · Note
• http://kb.cert.org/vuls/id/566875 · Note