CVE-2008-0988 - Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of service (crash) via crafted arguments that trigger a buffer over-read

Back Back to CVE browser

MEDIUM

Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of service (crash) via crafted arguments that trigger a buffer over-read

Published Mar 18, 2008

4.3

MEDIUM

CVSS 2.0

EPSS 1.65%

Description

Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of service (crash) via crafted arguments that trigger a buffer over-read.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-189

References (8)

http://docs.info.apple.com/article.html?artnum=307562
x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
vendor-advisoryx_refsource_APPLEPatch
http://secunia.com/advisories/29420
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/28304
vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/28374
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019661
vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA08-079A.html
third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2008/0924/references
vdb-entryx_refsource_VUPEN

Link	Providers	Tags
http://docs.info.apple.com/article.html?artnum=307562		x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html		vendor-advisoryx_refsource_APPLEPatch
http://secunia.com/advisories/29420		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/28304		vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/28374		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019661		vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA08-079A.html		third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2008/0924/references		vdb-entryx_refsource_VUPEN

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 18, 2008

Updated Aug 7, 2024

Reserved Feb 26, 2008

Link CVE-2008-0988

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-0988

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-0988