CVE-2008-2320

🗓️ 04 Aug 2008 01:00:00Reported by mitreType

Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long filename to the file management API

Reporter	Title	Published	Views	Family All 11
Cvelist	CVE-2008-2320	4 Aug 200801:00	–	cvelist
EUVD	EUVD-2008-2316	7 Oct 202500:30	–	euvd
Tenable Nessus	Mac OS X : Apple Safari < 4.0	9 Jun 200900:00	–	nessus
Tenable Nessus	Mac OS X Multiple Vulnerabilities (Security Update 2008-005)	1 Aug 200800:00	–	nessus
Tenable Nessus	Safari < 4.0 Multiple Vulnerabilities	9 Jun 200900:00	–	nessus
NVD	CVE-2008-2320	4 Aug 200801:41	–	nvd
OpenVAS	Mac OS X Security Update 2008-005	12 May 201000:00	–	openvas
OpenVAS	Mac OS X Security Update 2008-005	12 May 201000:00	–	openvas
Prion	Stack overflow	4 Aug 200801:41	–	prion
seebug.org	Apple Mac OS X CarbonCore栈溢出漏洞	4 Aug 200800:00	–	seebug

NVD

Node

apple mac_os_xMatch10.4.11

apple mac_os_xMatch10.5.4

apple mac_os_x_serverMatch10.4.11

apple mac_os_x_serverMatch10.5.4

AND

apple carboncore

Source	Link
securityfocus	www.securityfocus.com/bid/30487
support	www.support.apple.com/kb/HT3613
securityfocus	www.securityfocus.com/bid/30483
securityfocus	www.securityfocus.com/archive/1/495040/100/0/threaded
vupen	www.vupen.com/english/advisories/2009/1522
vupen	www.vupen.com/english/advisories/2008/2268
vupen	www.vupen.com/english/advisories/2009/1621
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/44126
support	www.support.apple.com/kb/HT3639
securitytracker	www.securitytracker.com/id

23 Apr 2026 00:35Current

8.9High risk

Vulners AI Score8.9

CVSS 29.3

EPSS0.03618

CWE-119