CVE-2008-1034

2008-06-0221:30:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2008-1034

apple

mac os x

help viewer

buffer overflow

remote code execution

denial of service

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.049 Low

EPSS

Percentile

92.8%

JSON

Integer underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted help:topic URL that triggers a buffer overflow.

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.1
apple:mac_os_xapple mac os xeq10.0
apple:mac_os_xapple mac os xle10.4
apple:mac_os_xapple mac os xeq10.2
apple:mac_os_xapple mac os xeq10.3

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.1
apple:mac_os_x	apple mac os x	eq	10.0
apple:mac_os_x	apple mac os x	le	10.4
apple:mac_os_x	apple mac os x	eq	10.2
apple:mac_os_x	apple mac os x	eq	10.3