Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-4211
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-4211

Description:
Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to "handling of columns."

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/45784

ST
  1021027

SAID
  Secunia Advisory: SA32756
  Secunia Advisory: SA32222

CONFIRM
  http://support.apple.com/kb/HT3318
  http://support.apple.com/kb/HT3216

BID
  31707
  31681

APPLE
  http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
  http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html


Return to the previous page.