← Database

CVE-2008-4221

CRITICAL CVSS: 10.0 Published: 2008-12-17 Modified: 2026-06-16

Description

The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted date string, related to improper memory allocation.

Affected Platforms

Apple Mac Os X ServerApple Mac Os X

Weakness Type

CWE-399

References