Apple Mac OS X AppKit Legacy Serialization Kit Multiple Integer Overflow Vulnerabilities
BID:28358
Info
Apple Mac OS X AppKit Legacy Serialization Kit Multiple Integer Overflow Vulnerabilities
| Bugtraq ID: | 28358 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0057 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 18 2008 12:00AM |
| Updated: | Mar 24 2008 03:10PM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X AppKit Legacy Serialization Kit Multiple Integer Overflow Vulnerabilities
Apple Mac OS X is prone to multiple integer-overflow vulnerabilities because the software fails to ensure that integer values are not overrun.
Successfully exploiting these issues could allow attackers to execute arbitrary code in the context of the user running the affected software. Failed exploit attempts will result in a denial-of-service condition.
NOTE: These vulnerabilities were previously covered in BID 28304 (Apple Mac OS X 2008-002 Multiple Security Vulnerabilities), but have been given this record to better document the issues.
Apple Mac OS X is prone to multiple integer-overflow vulnerabilities because the software fails to ensure that integer values are not overrun.
Successfully exploiting these issues could allow attackers to execute arbitrary code in the context of the user running the affected software. Failed exploit attempts will result in a denial-of-service condition.
NOTE: These vulnerabilities were previously covered in BID 28304 (Apple Mac OS X 2008-002 Multiple Security Vulnerabilities), but have been given this record to better document the issues.
Exploit / POC
Apple Mac OS X AppKit Legacy Serialization Kit Multiple Integer Overflow Vulnerabilities
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Apple Mac OS X AppKit Legacy Serialization Kit Multiple Integer Overflow Vulnerabilities
Solution:
The vendor released updates to address these issues. Please see the references for more information.
Solution:
The vendor released updates to address these issues. Please see the references for more information.
References
Apple Mac OS X AppKit Legacy Serialization Kit Multiple Integer Overflow Vulnerabilities
References:
References: