CVE-2008-2322 Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF file with a....
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF file with a long Type 1 font, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple coregraphics | All versions | No fix listed |
References
- 20080731 Apple Mac OS X CoreGraphics PDF Type1 Font Integer Overflow Vulnerability third-party-advisory
- APPLE-SA-2008-07-31 vendor-advisory
- 31326 third-party-advisory vendor-advisory
- 30483 patch vdb-entry
- 30489 patch vdb-entry
- 1020604 vdb-entry
- ADV-2008-2268 vdb-entry
- macosx-coregraphics-pdf-bo(44128) vdb-entry