Unscored CVE-2008-2322 EUVD-2008-2318GHSA-9rr5-m9pr-wvhc

Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a…

Published Aug 4, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF file with a long Type 1 font, which triggers a heap-based buffer overflow.

References

APPLE-SA-2008-07-31 vendor-advisory
30489 vdb-entry
ADV-2008-2268 vdb-entry
1020604 vdb-entry
31326 third-party-advisory
macosx-coregraphics-pdf-bo(44128) vdb-entry
20080731 Apple Mac OS X CoreGraphics PDF Type1 Font Integer Overflow Vulnerability third-party-advisory
30483 vdb-entry