CVE-2008-2321 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 12.5% (pctl 96)
Patch early
A public exploit exists.
Description
Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unknown vectors involving "processing of arguments."
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 12.49% — more likely to be exploited than 96% of all CVEs |
| Weakness | CWE-399 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-08-04 |
| Last modified | 2026-06-16 |
Affected (3)
| Vendor | Product |
|---|---|
| apple | coregraphics |
| apple | mac os x |
| apple | mac os x server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Apple Mac OSX 10.x - CoreGraphics Multiple Memory Corruption Vulnerabilities | 2008-07-31 |
References
- http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
- http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- http://secunia.com/advisories/31326
- http://secunia.com/advisories/32756
- http://secunia.com/advisories/35379
- http://support.apple.com/kb/HT3318
- http://support.apple.com/kb/HT3613
- http://www.securityfocus.com/bid/30483
- http://www.securityfocus.com/bid/30488
- http://www.securitytracker.com/id?1020603
- http://www.vupen.com/english/advisories/2008/2268
- http://www.vupen.com/english/advisories/2008/3232
- http://www.vupen.com/english/advisories/2009/1522
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44127
- http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
- http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- http://secunia.com/advisories/31326
- http://secunia.com/advisories/32756
→ the Explorer · watch your stack · NVD