PT-2008-2590
CVE-2008-0987
·
Published
2008-03-18
·
Updated
2017-08-08
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Apple Mac OS X version 10.5.2
Digital Camera RAW Compatibility versions prior to Update 2.0 for Aperture 2 and iPhoto 7.1.2
Description
A stack-based buffer overflow issue in Image Raw allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image.
Recommendations
For Apple Mac OS X version 10.5.2, update to a newer version to mitigate the risk.
For Digital Camera RAW Compatibility versions prior to Update 2.0 for Aperture 2 and iPhoto 7.1.2, apply Update 2.0 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾