CVE-2008-2304

CVE-2008-2304 describes a buffer overflow in Apple Core Image Fun House (2.0 and earlier) within CoreImage Examples in Xcode tools before 3.1. The flaw arises when processing a .funhouse file with XML data: code path draws a point label and at one point copies a C string without length bound (str...