PT-2008-5513 · Apple · Macos X

Richard Van Eeden · Published 2008-12-17 · Updated 2011-03-08 · CVE-2008-4218

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mac OS X versions prior to 10.5.6

Description: The issue is related to multiple integer overflows in the kernel on Intel platforms, which can be exploited by local users to gain privileges. This can be achieved through crafted calls to specific functions, including (1) i386 set ldt or (2) i386 get ldt.

Recommendations: For Mac OS X versions prior to 10.5.6, update to version 10.5.6 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-4218

Affected Products

Macos X

References · 9

• http://support.apple.com/kb/HT3338 · Vendor Advisory
• http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html · Vendor Advisory
• http://secunia.com/advisories/33179 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4218 · Security Note
• http://securitytracker.com/id?1021403 · Note
• http://securityfocus.com/bid/32879 · Note
• http://us-cert.gov/cas/techalerts/TA08-350A.html · Note
• http://vupen.com/english/advisories/2008/3444 · Note
• http://securityfocus.com/bid/32839 · Note