CVE-2008-4211

Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to "handling of columns."
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*

History

No history.

Information

Published : 2008-10-10 10:30

Updated : 2024-02-28 11:21


NVD link : CVE-2008-4211

Mitre link : CVE-2008-4211

CVE.ORG link : CVE-2008-4211


JSON object : View

Products Affected

apple

  • mac_os_x_server
  • iphone_os
  • mac_os_x
CWE
CWE-189

Numeric Errors