[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97147

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-1030

Date: (C)2008-06-02   (M)2017-08-08 


Integer overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple Mac OS X before 10.5.3 allows context-dependent attackers to execute arbitrary code or cause a denial of service (crash) via an invalid length argument, which triggers a heap-based buffer overflow.

CVSS Score: 10.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECTRACK-1020135
BID-29412
BID-29491
SECUNIA-30430
ADV-2008-1697
APPLE-SA-2008-05-28
TA08-150A
macosx-corefoundation-cfdatareplacebytes-bo(42709)

CPE    8
cpe:/o:apple:mac_os_x:10.5
cpe:/o:apple:mac_os_x:10.4.11
cpe:/o:apple:mac_os_x:10.5.2
cpe:/o:apple:mac_os_x:10.5.1
...
CWE    1
CWE-20

© 2013 SecPod Technologies