CVE-2008-3623 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3623
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3623

Description: Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces.

CVE Status: Candidate

References: SAID Secunia Advisory: SA33179 CONFIRM http://support.apple.com/kb/HT3639 http://support.apple.com/kb/HT3338 http://support.apple.com/kb/HT3298 CERT http://www.us-cert.gov/cas/techalerts/TA08-350A.html BID 32291 APPLE http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html

Return to the previous page.