Skip to content
OpenAdvisories
Unscored CVE-2008-3637 EUVD-2008-3623GHSA-hf4v-6g3h-xvv3

The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized vari…

Published Sep 26, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to execute arbitrary code via a crafted applet, related to an "error checking issue."

References