QwikSec

Security Database

CVE

CWE

Training

CVE-2008-2320

Published: Aug 4, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long filename to the file management API.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

http://support.apple.com/kb/HT3639

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

APPLE-SA-2008-07-31

vendor-advisory

x_refsource_APPLE

vdb-entry

x_refsource_SECTRACK

APPLE-SA-2009-06-08-1

vendor-advisory

x_refsource_APPLE

vdb-entry

x_refsource_VUPEN

vdb-entry

x_refsource_VUPEN

APPLE-SA-2009-06-17-1

vendor-advisory

x_refsource_APPLE

third-party-advisory

x_refsource_SECUNIA

20080801 n.runs-SA-2008.005 - Apple Inc. - CoreServices Frameworkâ??s CarbonCore Framework - Arbitrary Code Execution (remote)

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_SECUNIA

http://support.apple.com/kb/HT3613

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

macosx-carboncore-bo(44126)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.