CVE-2008-3623: Buffer Overflow
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3623?
CVE-2008-3623 has a high severity rating as it allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2008-3623?
To mitigate CVE-2008-3623, users should upgrade to the latest version of Apple Safari, which includes the security fix.
Which versions of Apple Safari are affected by CVE-2008-3623?
Versions of Apple Safari prior to 3.2 and specific versions of iPhone OS up to 2.2.1 are affected by CVE-2008-3623.
Can CVE-2008-3623 be exploited by local attackers?
CVE-2008-3623 is primarily a remote code execution vulnerability and does not require local access to exploit.
What types of attacks can leverage CVE-2008-3623?
CVE-2008-3623 can be exploited through crafted images that, when processed by the browser, can cause application crashes or execute malicious code.