CVE-2008-2321

Description

Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unknown vectors involving "processing of arguments."

Affected products

• Apple / coregraphics

Exploits & proofs of concept

• exploit-dbApple Mac OSX 10.x - CoreGraphics Multiple Memory Corruption Vulnerabilitiesby Michal Zalewski

References

• MAILING_LISThttp://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
• MAILING_LISThttp://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
• MISChttp://www.securitytracker.com/id?1020603
• MAILING_LISThttp://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/2268
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2009/1522
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/3232
• MISChttp://www.securityfocus.com/bid/30488
• VENDOR_ADVISORYhttp://secunia.com/advisories/35379
• VENDOR_ADVISORYhttp://support.apple.com/kb/HT3318
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/44127
• VENDOR_ADVISORYhttp://secunia.com/advisories/31326
• VENDOR_ADVISORYhttp://support.apple.com/kb/HT3613
• MISChttp://www.securityfocus.com/bid/30483
• VENDOR_ADVISORYhttp://secunia.com/advisories/32756