Unscored severity · published Feb 8, 2008
CVE-2008-0043
Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions
–
CVSS
3.9%
EPSS
No
On KEV
Description
Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Iphoto · Apple
through 7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0043
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0043
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=307398
Patch
http://lists.apple.com/archives/security-announce/2008/Feb/msg00000.html
Vendor Advisory
http://secunia.com/advisories/28805
www.securityfocus.com
http://www.securityfocus.com/bid/27636
www.securitytracker.com
http://www.securitytracker.com/id?1019307
www.vupen.com
http://www.vupen.com/english/advisories/2008/0428/references
More from Iphoto
–
CVE-2008-0987
Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers…
–
CVE-2008-0830
The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (crash) via a malformed dpap: URI, a different vulnerability…
–
CVE-2007-0645
Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not…
–
CVE-2007-0051
Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast…