Vulnerabilities > CVE-2008-2323 - Resource Management Errors vulnerability in Apple Data Detectors Engine
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
COMPLETE Summary
Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of service (resource consumption) via crafted textual content in messages.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 1 | |
Application | 1 |
Common Weakness Enumeration (CWE)
Nessus
NASL family | MacOS X Local Security Checks |
NASL id | MACOSX_SECUPD2008-005.NASL |
description | The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-005 applied. This update contains security fixes for a number of programs. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 33790 |
published | 2008-08-01 |
reporter | This script is Copyright (C) 2008-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/33790 |
title | Mac OS X Multiple Vulnerabilities (Security Update 2008-005) |
code |
|
Seebug
bulletinFamily | exploit |
description | BUGTRAQ ID: 30487,30488,30489,30490,30492,30493 CVE(CAN) ID: CVE-2008-2320,CVE-2008-2321,CVE-2008-2322,CVE-2008-2323,CVE-2008-2324,CVE-2008-2325 Mac OS X是苹果家族机器所使用的操作系统。 Apple 2008-005安全更新修复了Mac OS X中的多个安全漏洞,本地或远程攻击者可能利用这些漏洞造成多种威胁。 CVE-2008-2320 处理超长文件名时的栈溢出漏洞可能导致应用意外终止或执行任意指令。 CVE-2008-2321 CoreGraphics在处理参数时存在多个内存破坏漏洞,通过浏览器等应用程序向CoreGraphics传送不可信任输入可能导致应用意外终止或执行任意指令。 CVE-2008-2322 处理PDF文件时的整数溢出可能导致堆溢出,查看了特制的PDF文件可能导致应用意外终止或执行任意代码。 CVE-2008-2323 Data Detectors在处理文字内容时存在资源耗尽漏洞,在使用Data Detectors的应用程序中查看恶意内容可能导致拒绝服务。 CVE-2008-2324 Disk Utility中的Repair Permissions工具设置了/usr/bin/emacs setuid。在运行Repair Permissions工具后,本地用户可以使用emacs以系统权限运行命令。 CVE-2008-2325 QuickLook处理Microsoft Office文件时存在多个内存破坏漏洞,下载恶意的Microsoft Office文件可能导致应用程序意外终止或执行任意指令。 Apple Mac OS X 10.5.4 Apple Mac OS X 10.4.11 Apple MacOS X Server 10.5.4 Apple MacOS X Server 10.4.11 Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: <a href=http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20388&cat=1&platform=osx&method=sa/SecUpd2008-005.dmg target=_blank>http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20388&cat=1&platform=osx&method=sa/SecUpd2008-005.dmg</a> |
id | SSV:3769 |
last seen | 2017-11-19 |
modified | 2008-08-04 |
published | 2008-08-04 |
reporter | Root |
title | Apple Mac OS X 2008-005更新修复多个安全漏洞 |
References
- http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
- http://secunia.com/advisories/31326
- http://www.securityfocus.com/bid/30483
- http://www.securityfocus.com/bid/30490
- http://www.securitytracker.com/id?1020606
- http://www.vupen.com/english/advisories/2008/2268
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44130