Lucene search
HistorySep 16, 2008 - 11:00 p.m.
CVE-2008-2305
cve-2008-2305
apple
mac os x
ats
buffer overflow
remote code execution
postscript font names
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to “PostScript font names.”
Affected configurations
Node
applemac_os_xMatch10.4.11
ORapplemac_os_xMatch10.5
ORapplemac_os_xMatch10.5.1
ORapplemac_os_xMatch10.5.2
ORapplemac_os_xMatch10.5.3
ORapplemac_os_xMatch10.5.4
ORapplemac_os_x_serverMatch10.4.11
ORapplemac_os_x_serverMatch10.5
ORapplemac_os_x_serverMatch10.5.1
ORapplemac_os_x_serverMatch10.5.2
ORapplemac_os_x_serverMatch10.5.3
ORapplemac_os_x_serverMatch10.5.4
References
Related
prion
prion
Heap overflow
2008-09-16 23:00:00
cvelist
cvelist
CVE-2008-2305
2008-09-16 23:00:00
nvd
nvd
CVE-2008-2305
2008-09-16 23:00:00
openvas
openvas
Mac OS X 10.5.5 Update / Security Update 2008-006
2010-05-12 00:00:00
Mac OS X 10.5.5 Update / Security Update 2008-006
2010-05-12 00:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2008-006)
2008-09-16 00:00:00
Mac OS X 10.5.x < 10.5.5 Multiple Vulnerabilities
2008-09-16 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
Related for CVE-2008-2305