CVE-2008-4220

Integer overflow in the inet_net_pton API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. NOTE: this may be related to the WLB-2008080064 advisory published by SecurityReason on 20080822; however, as of 20081216, there are insufficient details to be sure.

Affected Software

Name	Vendor	Start Version	End Version
Mac_os_x	Apple	*	10.5.5 (including)
Mac_os_x	Apple	10.4.11 (including)	10.4.11 (including)
Mac_os_x	Apple	10.5 (including)	10.5 (including)
Mac_os_x	Apple	10.5.1 (including)	10.5.1 (including)
Mac_os_x	Apple	10.5.2 (including)	10.5.2 (including)
Mac_os_x	Apple	10.5.3 (including)	10.5.3 (including)
Mac_os_x	Apple	10.5.4 (including)	10.5.4 (including)
Mac_os_x_server	Apple	*	10.5.5 (including)
Mac_os_x_server	Apple	10.4.11 (including)	10.4.11 (including)
Mac_os_x_server	Apple	10.5 (including)	10.5 (including)
Mac_os_x_server	Apple	10.5.1 (including)	10.5.1 (including)
Mac_os_x_server	Apple	10.5.2 (including)	10.5.2 (including)
Mac_os_x_server	Apple	10.5.3 (including)	10.5.3 (including)
Mac_os_x_server	Apple	10.5.4 (including)	10.5.4 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-4220
CWE	https://cwe.mitre.org/data/definitions/189.html

Affected Software

References