MitreCVELIST:CVE-2008-3623CVE-2008-3623
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces.
References
lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
lists.apple.com/archives/security-announce//2008/Nov/msg00001.html
lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
secunia.com/advisories/32706
secunia.com/advisories/33179
support.apple.com/kb/HT3298
support.apple.com/kb/HT3338
support.apple.com/kb/HT3639
www.securityfocus.com/bid/32291
www.securitytracker.com/id?1021225
www.us-cert.gov/cas/techalerts/TA08-350A.html
www.vupen.com/english/advisories/2008/3444
www.vupen.com/english/advisories/2009/1621
Related
