CVE-2008-0057

Multiple integer overflows in a "legacy serialization format" parser in AppKit in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via a crafted serialized property list.

• CWE-189

• http://docs.info.apple.com/article.html?artnum=307562
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlPatch
• http://www.securityfocus.com/bid/28304
• http://www.securityfocus.com/bid/28358
• http://www.securitytracker.com/id?1019648
• http://www.us-cert.gov/cas/techalerts/TA08-079A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0924/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41298
• http://docs.info.apple.com/article.html?artnum=307562
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlPatch
• http://www.securityfocus.com/bid/28304
• http://www.securityfocus.com/bid/28358
• http://www.securitytracker.com/id?1019648
• http://www.us-cert.gov/cas/techalerts/TA08-079A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0924/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41298

Published

Mar 18, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0051Integer overflow in CoreFoundation in Apple Mac OS X 10.4.11…
• CVE-2008-0052CoreServices in Apple Mac OS X 10.4.11 treats .ief as a safe…
• CVE-2008-0053Multiple buffer overflows in the HP-GL/2-to-PostScript filte…
• CVE-2008-0054Foundation in Apple Mac OS X 10.4.11 might allow context-dep…
• CVE-2008-0055Foundation in Apple Mac OS X 10.4.11 creates world-writable …
• CVE-2008-0056Stack-based buffer overflow in Foundation in Apple Mac OS X …
• CVE-2008-0058Race condition in the NSURLConnection cache management funct…
• CVE-2008-0059Race condition in NSXML in Foundation for Apple Mac OS X 10.…
• CVE-2008-0060Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remo…
• CVE-2008-0061MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 bef…
• CVE-2008-0062KDC in MIT Kerberos 5 (krb5kdc) does not set a global variab…9.8
• CVE-2008-0063The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) do…7.5