← Database

CVE-2008-1030

CRITICAL CVSS: 10.0 Published: 2008-06-02 Modified: 2026-06-16

Description

Integer overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple Mac OS X before 10.5.3 allows context-dependent attackers to execute arbitrary code or cause a denial of service (crash) via an invalid length argument, which triggers a heap-based buffer overflow.

Affected Platforms

Apple Mac Os X ServerApple Mac Os X

Weakness Type

CWE-20

References