Description
Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long filename to the file management API.
References
- 30487 vdb-entry
- http://support.apple.com/kb/HT3639
- ADV-2009-1621 vdb-entry
- APPLE-SA-2008-07-31 vendor-advisory
- 1020602 vdb-entry
- APPLE-SA-2009-06-08-1 vendor-advisory
- ADV-2008-2268 vdb-entry
- ADV-2009-1522 vdb-entry
- APPLE-SA-2009-06-17-1 vendor-advisory
- 35379 third-party-advisory
- 20080801 n.runs-SA-2008.005 - Apple Inc. - CoreServices Frameworkâ??s CarbonCore Framework - Arbitrary Code Execution (remote) mailing-list
- 31326 third-party-advisory
- http://support.apple.com/kb/HT3613
- 30483 vdb-entry
- macosx-carboncore-bo(44126) vdb-entry