CVE-2008-3623 Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute a...
HighCVSS 9.3
EPSS 8.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | All versions | No fix listed |
| apple Safari | <= 3.1.2 | No fix listed |
| apple Safari | = 0.8 | No fix listed |
| apple Safari | = 0.9 | No fix listed |
| apple Safari | = 1.0 | No fix listed |
| apple Safari | = 1.0-beta | No fix listed |
| apple Safari | = 1.0-beta2 | No fix listed |
| apple Safari | = 1.0.3 | No fix listed |
| apple Safari | = 1.1 | No fix listed |
| apple Safari | = 1.1.1 | No fix listed |
| apple Safari | = 1.2 | No fix listed |
| apple Safari | = 1.2.1 | No fix listed |
| apple Safari | = 1.2.2 | No fix listed |
| apple Safari | = 1.2.3 | No fix listed |
| apple Safari | = 1.2.4 | No fix listed |
| apple Safari | = 1.2.5 | No fix listed |
| apple Safari | = 1.3 | No fix listed |
| apple Safari | = 1.3.1 | No fix listed |
| apple Safari | = 1.3.2 | No fix listed |
| apple Safari | = 2 | No fix listed |
| apple Safari | = 2.0 | No fix listed |
| apple Safari | = 2.0.1 | No fix listed |
| apple Safari | = 2.0.2 | No fix listed |
| apple Safari | = 2.0.3 | No fix listed |
| apple Safari | = 2.0.3_417.9.3 | No fix listed |
Show 13 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | = 2.0.4 | No fix listed |
| apple Safari | = 2.0.4_419.3 | No fix listed |
| apple Safari | = 2.0_pre | No fix listed |
| apple Safari | = 3 | No fix listed |
| apple Safari | = 3.0 | No fix listed |
| apple Safari | = 3.0.1 | No fix listed |
| apple Safari | = 3.0.2 | No fix listed |
| apple Safari | = 3.0.3 | No fix listed |
| apple Safari | = 3.0.3-522.15.5 | No fix listed |
| apple Safari | = 3.0.4 | No fix listed |
| apple Safari | = 3.0.4_beta | No fix listed |
| apple Safari | = 3.1 | No fix listed |
| apple Safari | = 3.1.1 | No fix listed |
References
- APPLE-SA-2008-12-15 vendor-advisory
- APPLE-SA-2008-11-13 vendor-advisory
- APPLE-SA-2009-06-17-1 vendor-advisory
- 32706 third-party-advisory
- 33179 third-party-advisory
- support.apple.com vendor-advisory
- support.apple.com
- support.apple.com
- 32291 vdb-entry
- 1021225 vdb-entry
- TA08-350A third-party-advisory us-government-resource
- ADV-2008-3444 vdb-entry
- ADV-2009-1621 vdb-entry