NVD

Id
3505  
Name
CVE-2008-3637  
Description
The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to execute arbitrary code via a crafted applet, related to an "error checking issue."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-26  
Modified Date
2012-10-29  
Seq
2008-3637  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
22021 3505 CVE-2008-3637 APPLE-SA-2008-09-24  View
22022 3505 CVE-2008-3637 APPLE-SA-2008-09-24  View
22023 3505 CVE-2008-3637 http://support.apple.com/kb/HT3178  View
22024 3505 CVE-2008-3637 http://support.apple.com/kb/HT3179  View
22025 3505 CVE-2008-3637 31379  View
22026 3505 CVE-2008-3637 1020943  View
22027 3505 CVE-2008-3637 java-macos-hmac-code-execution(45396)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46428 JVNDB-2008-001738 Apple Mac OS X 上で起動している Java の HMAC プロバイダ における任意のコードを実行される脆弱性 Apple Mac OS X 上で起動している Java の Hash-based Message Authentication Code (HMAC) プロバイダには、アプレットの処理に不備があり、任意のコードを実行される脆弱性が存在します。 CVE-2008-3637 33750 CVE-2008-3637 3505 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001738.html 2008-09-24 2008-10-15 View