CVE-2008-0987

Published: Mar 18, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image.

Affected (2)

Products: Apple: Aperture, Iphoto

2 products

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Apple Aperture	Version 2
Apple Iphoto	Version 7.1.2

Running on/with	Platform Versions
Apple Mac Os X	Version 10.5.2
Apple Mac Os X Server	Version 10.5.2

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (30)

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

Patch

http://lists.apple.com/archives/security-announce/2008/Mar/msg00003.html

Source: cve@mitre.org

http://secunia.com/advisories/29420

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29469

Source: cve@mitre.org

Vendor Advisory

http://support.apple.com/kb/HT1232

Source: cve@mitre.org

http://www.securityfocus.com/bid/28304

Source: cve@mitre.org

http://www.securityfocus.com/bid/28363

Source: cve@mitre.org

http://www.securitytracker.com/id?1019659

Source: cve@mitre.org

http://www.securitytracker.com/id?1019683

Source: cve@mitre.org

http://www.securitytracker.com/id?1019684

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-079A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2008/0957/references

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/41294

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.apple.com/archives/security-announce/2008/Mar/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29420

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/29469

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT1232

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/28304

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/28363

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019659

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019683

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019684

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA08-079A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2008/0924/references

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2008/0957/references

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/41294

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.