PT-2008-3820

CVE-2008-2332

·

Publicado

2008-09-16

·

Atualizado

2017-08-08

Descrição por

CVSS 2.0
9.3
Alta
MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: ImageIO in Apple Mac OS X versions 10.4.11 and 10.5 through 10.5.4
Description: The issue allows context-dependent attackers to cause a denial of service, resulting in memory corruption and application crash, or execute arbitrary code via a crafted TIFF image.
Recommendations: For Mac OS X 10.4.11, update to a version that fixes the issue. For Mac OS X versions 10.5 through 10.5.4, update to a version that fixes the issue. As a temporary workaround, consider avoiding the use of crafted TIFF images until a patch is available.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-399
Identificadores relacionados
CVE-2008-2332
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com