CVE

Id
31145  
CVE No.
CVE-2008-1028  
Status
Candidate  
Description
Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document file, as demonstrated by opening the document with TextEdit.  
Phase
Assigned (20080226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
331995 31145 CVE-2008-1028 APPLE:APPLE-SA-2008-05-28  View
331996 31145 CVE-2008-1028 URL:http://lists.apple.com/archives/security-announce/2008//May/msg00001.html  View
331997 31145 CVE-2008-1028 CERT:TA08-150A  View
331998 31145 CVE-2008-1028 URL:http://www.us-cert.gov/cas/techalerts/TA08-150A.html  View
331999 31145 CVE-2008-1028 BID:29412  View
332000 31145 CVE-2008-1028 URL:http://www.securityfocus.com/bid/29412  View
332001 31145 CVE-2008-1028 BID:29487  View
332002 31145 CVE-2008-1028 URL:http://www.securityfocus.com/bid/29487  View
332003 31145 CVE-2008-1028 VUPEN:ADV-2008-1697  View
332004 31145 CVE-2008-1028 URL:http://www.vupen.com/english/advisories/2008/1697  View
332005 31145 CVE-2008-1028 SECTRACK:1020131  View
332006 31145 CVE-2008-1028 URL:http://securitytracker.com/id?1020131  View
332007 31145 CVE-2008-1028 SECUNIA:30430  View
332008 31145 CVE-2008-1028 URL:http://secunia.com/advisories/30430  View
332009 31145 CVE-2008-1028 XF:macosx-appkit-code-execution(42705)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46092 JVNDB-2008-001402 Apple Mac OS X の CoreTypes における任意のコードが実行される脆弱性 Apple Mac OS X の CoreTypes には、ダウンロード可能なオブジェクトの Automator、Help、Safari、Terminal コンテンツタイプの処理に不備があるため、ダウンロード検証機能 (Mac OS X 10.4) または、検疫機能 (Mac OS X 10.5) による警告が行われず、任意のコードが実行される脆弱性が存在します。 CVE-2008-1032 31145 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001402.html  View