CVE-2008-0987 Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary....
MediumCVSS 6.8
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple aperture | = 2 | No fix listed |
| apple iphoto | = 7.1.2 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2008-03-18 patch vendor-advisory
- APPLE-SA-2008-03-20 vendor-advisory
- 29420 third-party-advisory vendor-advisory
- 29469 third-party-advisory vendor-advisory
- support.apple.com
- 28304 vdb-entry
- 28363 vdb-entry
- 1019659 vdb-entry
- 1019683 vdb-entry
- 1019684 vdb-entry
- TA08-079A third-party-advisory us-government-resource
- ADV-2008-0924 vdb-entry vendor-advisory
- ADV-2008-0957 vdb-entry vendor-advisory
- macos-imageraw-bo(41294) vdb-entry