Details of VAR-201008-0296

ID

VAR-201008-0296

CVE

CVE-2010-1808

TITLE

Apple Mac OS X of Apple Type Services Vulnerable to stack-based buffer overflow

Trust: 0.8

sources: JVNDB: JVNDB-2010-001969

DESCRIPTION

Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document. An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. The following versions are vulnerable. Mac OS X v10.5.8 Mac OS X Server v10.5.8 Mac OS X v10.6.4 Mac OS X Server v10.6.4

Trust: 1.98

sources: NVD: CVE-2010-1808 // JVNDB: JVNDB-2010-001969 // BID: 42652 // VULHUB: VHN-44413

AFFECTED PRODUCTS

vendor:	apple	model:	type services	scope:	-	version:	-	Trust: 1.4
vendor:	apple	model:	type services	scope:	eq	version:	*	Trust: 1.0
vendor:	apple	model:	mac os x	scope:	eq	version:	10.6.4	Trust: 1.0
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.8	Trust: 1.0
vendor:	apple	model:	mac os x	scope:	eq	version:	10.5.8	Trust: 1.0
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.6.4	Trust: 1.0
vendor:	apple	model:	mac os x	scope:	eq	version:	v10.5.8	Trust: 0.8
vendor:	apple	model:	mac os x	scope:	eq	version:	v10.6.4	Trust: 0.8
vendor:	apple	model:	mac os x server	scope:	eq	version:	v10.5.8	Trust: 0.8
vendor:	apple	model:	mac os x server	scope:	eq	version:	v10.6.4	Trust: 0.8
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.6.4	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.8	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.6.4	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.5.8	Trust: 0.3

sources: BID: 42652 // JVNDB: JVNDB-2010-001969 // CNNVD: CNNVD-201008-296 // NVD: CVE-2010-1808

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2010-1808
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2010-1808
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201008-296
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-44413
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2010-1808
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-44413
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-44413 // JVNDB: JVNDB-2010-001969 // CNNVD: CNNVD-201008-296 // NVD: CVE-2010-1808

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-44413 // JVNDB: JVNDB-2010-001969 // NVD: CVE-2010-1808

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201008-296

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201008-296

CONFIGURATIONS

sources: JVNDB: JVNDB-2010-001969

PATCH

title:	HT4312	url:	http://support.apple.com/kb/HT4312	Trust: 0.8
title:	HT4312	url:	http://support.apple.com/kb/HT4312?viewlocale=ja_JP	Trust: 0.8

sources: JVNDB: JVNDB-2010-001969

EXTERNAL IDS

db:	NVD	id:	CVE-2010-1808	Trust: 2.8
db:	SECTRACK	id:	1024359	Trust: 2.5
db:	JVNDB	id:	JVNDB-2010-001969	Trust: 0.8
db:	CNNVD	id:	CNNVD-201008-296	Trust: 0.7
db:	APPLE	id:	APPLE-SA-2010-08-24-1	Trust: 0.6
db:	BID	id:	42652	Trust: 0.4
db:	VULHUB	id:	VHN-44413	Trust: 0.1

sources: VULHUB: VHN-44413 // BID: 42652 // JVNDB: JVNDB-2010-001969 // CNNVD: CNNVD-201008-296 // NVD: CVE-2010-1808

REFERENCES

url:	http://securitytracker.com/id?1024359	Trust: 2.5
url:	http://lists.apple.com/archives/security-announce/2010//aug/msg00003.html	Trust: 1.7
url:	http://support.apple.com/kb/ht4312	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1808	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-1808	Trust: 0.8
url:	http://www.apple.com/macosx/	Trust: 0.3

sources: VULHUB: VHN-44413 // BID: 42652 // JVNDB: JVNDB-2010-001969 // CNNVD: CNNVD-201008-296 // NVD: CVE-2010-1808

CREDITS

Apple

Trust: 0.3

sources: BID: 42652

SOURCES

db:	VULHUB	id:	VHN-44413
db:	BID	id:	42652
db:	JVNDB	id:	JVNDB-2010-001969
db:	CNNVD	id:	CNNVD-201008-296
db:	NVD	id:	CVE-2010-1808

LAST UPDATE DATE

2025-04-11T22:56:37.149000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-44413	date:	2010-08-26T00:00:00
db:	BID	id:	42652	date:	2010-08-24T00:00:00
db:	JVNDB	id:	JVNDB-2010-001969	date:	2010-09-08T00:00:00
db:	CNNVD	id:	CNNVD-201008-296	date:	2010-09-03T00:00:00
db:	NVD	id:	CVE-2010-1808	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-44413	date:	2010-08-25T00:00:00
db:	BID	id:	42652	date:	2010-08-24T00:00:00
db:	JVNDB	id:	JVNDB-2010-001969	date:	2010-09-08T00:00:00
db:	CNNVD	id:	CNNVD-201008-296	date:	2010-08-27T00:00:00
db:	NVD	id:	CVE-2010-1808	date:	2010-08-25T20:00:16.847