Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long filename to the file management API.

The version of Safari installed on the remote Windows host is earlier than 4.0.  It therefore is potentially affected by numerous issues in the following components :

  - CFNetwork
  - CoreGraphics
  - ImageIO
  - International Components for Unicode
  - libxml
  - Safari
  - Safari Windows Installer
  - WebKit

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.  As such, it is potentially affected by numerous issues in the following components :

  - CFNetwork
  - libxml
  - Safari
  - WebKit

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-005 applied. 

This update contains security fixes for a number of programs.

ID	Name	Product	Family	Type	Severity
39339	Safari < 4.0 Multiple Vulnerabilities	Nessus	Windows	Local	high
39338	Mac OS X : Apple Safari < 4.0	Nessus	MacOS X Local Security Checks	Local	high
33790	Mac OS X Multiple Vulnerabilities (Security Update 2008-005)	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2008-2320

critical

Tenable Plugins

high

high

critical