First published: Tue Sep 16 2008(Updated: )
ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted JPEG image with an embedded ICC profile.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X Server | =10.5.2 | |
Apple Mac OS X Server | =10.4.11 | |
macOS Yosemite | =10.5.1 | |
Apple Mac OS X Server | =10.5.1 | |
macOS Yosemite | =10.5.3 | |
Apple Mac OS X Server | =10.5.3 | |
macOS Yosemite | =10.5 | |
Apple Mac OS X Server | =10.5.4 | |
macOS Yosemite | =10.5.2 | |
macOS Yosemite | =10.4.11 | |
Apple Mac OS X Server | =10.5 | |
macOS Yosemite | =10.5.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-3608 is classified as a high severity vulnerability due to its potential to cause denial of service or execute arbitrary code.
To fix CVE-2008-3608, users should update their Apple Mac OS X to a version that has addressed the vulnerability.
CVE-2008-3608 affects users running Apple Mac OS X versions 10.4.11, 10.5 through 10.5.4, including certain server versions.
An attacker exploiting CVE-2008-3608 can cause memory corruption leading to application crashes or potentially execute arbitrary code.
CVE-2008-3608 was reported in September 2008 and is associated with vulnerabilities in the ImageIO component of Mac OS X.