{ "schema_version": "1.4.0", "id": "GHSA-q53r-vgvg-q6pj", "modified": "2022-05-02T00:01:45Z", "published": "2022-05-02T00:01:45Z", "aliases": [ "CVE-2008-3608" ], "details": "ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted JPEG image with an embedded ICC profile.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3608" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45168" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/31882" }, { "type": "WEB", "url": "http://secunia.com/advisories/32706" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT3276" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT3298" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/31189" }, { "type": "WEB", "url": "http://www.securitytracker.com/id?1020876" }, { "type": "WEB", "url": "http://www.us-cert.gov/cas/techalerts/TA08-260A.html" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2008/2584" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2008/3107" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2008-09-16T23:00:00Z" } }