Description
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces.
References
- http://support.apple.com/kb/HT3639
- APPLE-SA-2008-11-13 vendor-advisory
- ADV-2009-1621 vdb-entry
- ADV-2008-3444 vdb-entry
- TA08-350A third-party-advisory
- 33179 third-party-advisory
- 1021225 vdb-entry
- APPLE-SA-2009-06-17-1 vendor-advisory
- 32706 third-party-advisory
- 32291 vdb-entry
- http://support.apple.com/kb/HT3338
- http://support.apple.com/kb/HT3298
- APPLE-SA-2008-12-15 vendor-advisory