Lucene search

[email protected]CVE-2008-3608

HistorySep 16, 2008 - 11:00 p.m.

CVE-2008-3608

2008-09-1623:00:01

CWE-399

[email protected]

web.nvd.nist.gov

cve-2008-3608

apple

mac os x

imageio

denial of service

code execution

memory corruption

application crash

jpeg

icc profile

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted JPEG image with an embedded ICC profile.

Affected configurations

NVD

Node

applemac_os_xMatch10.4.11

applemac_os_xMatch10.5

applemac_os_xMatch10.5.1

applemac_os_xMatch10.5.2

applemac_os_xMatch10.5.3

applemac_os_xMatch10.5.4

applemac_os_x_serverMatch10.4.11

applemac_os_x_serverMatch10.5

applemac_os_x_serverMatch10.5.1

applemac_os_x_serverMatch10.5.2

applemac_os_x_serverMatch10.5.3

applemac_os_x_serverMatch10.5.4

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4.11
apple:mac_os_xapple mac os xeq10.5
apple:mac_os_xapple mac os xeq10.5.1
apple:mac_os_xapple mac os xeq10.5.2
apple:mac_os_xapple mac os xeq10.5.3
apple:mac_os_xapple mac os xeq10.5.4
apple:mac_os_x_serverapple mac os x servereq10.4.11
apple:mac_os_x_serverapple mac os x servereq10.5
apple:mac_os_x_serverapple mac os x servereq10.5.1
apple:mac_os_x_serverapple mac os x servereq10.5.2

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4.11
apple:mac_os_x	apple mac os x	eq	10.5
apple:mac_os_x	apple mac os x	eq	10.5.1
apple:mac_os_x	apple mac os x	eq	10.5.2
apple:mac_os_x	apple mac os x	eq	10.5.3
apple:mac_os_x	apple mac os x	eq	10.5.4
apple:mac_os_x_server	apple mac os x server	eq	10.4.11
apple:mac_os_x_server	apple mac os x server	eq	10.5
apple:mac_os_x_server	apple mac os x server	eq	10.5.1
apple:mac_os_x_server	apple mac os x server	eq	10.5.2

Rows per page:

1-10 of 121

References

lists.apple.com/archives/security-announce//2008/Nov/msg00001.html

lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

secunia.com/advisories/31882

secunia.com/advisories/32706

support.apple.com/kb/HT3276

support.apple.com/kb/HT3298

www.securityfocus.com/bid/31189

www.securitytracker.com/id?1020876

www.us-cert.gov/cas/techalerts/TA08-260A.html

www.vupen.com/english/advisories/2008/2584

www.vupen.com/english/advisories/2008/3107

exchange.xforce.ibmcloud.com/vulnerabilities/45168

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Related for CVE-2008-3608

nvd1 cvelist1 prion1 nessus5 openvas2