CVE-2008-0987

Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image.

• CWE-119

• http://docs.info.apple.com/article.html?artnum=307562
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlPatch
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00003.html
• http://secunia.com/advisories/29420Vendor Advisory
• http://secunia.com/advisories/29469Vendor Advisory
• http://support.apple.com/kb/HT1232
• http://www.securityfocus.com/bid/28304
• http://www.securityfocus.com/bid/28363
• http://www.securitytracker.com/id?1019659
• http://www.securitytracker.com/id?1019683
• http://www.securitytracker.com/id?1019684
• http://www.us-cert.gov/cas/techalerts/TA08-079A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0924/referencesVendor Advisory
• http://www.vupen.com/english/advisories/2008/0957/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41294
• http://docs.info.apple.com/article.html?artnum=307562
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlPatch
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00003.html
• http://secunia.com/advisories/29420Vendor Advisory
• http://secunia.com/advisories/29469Vendor Advisory
• http://support.apple.com/kb/HT1232
• http://www.securityfocus.com/bid/28304
• http://www.securityfocus.com/bid/28363
• http://www.securitytracker.com/id?1019659
• http://www.securitytracker.com/id?1019683
• http://www.securitytracker.com/id?1019684
• http://www.us-cert.gov/cas/techalerts/TA08-079A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0924/referencesVendor Advisory
• http://www.vupen.com/english/advisories/2008/0957/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41294

Published

Mar 18, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0981Open redirect vulnerability in spyce/examples/redirect.spy i…
• CVE-2008-0982Spyce - Python Server Pages (PSP) 2.1.3 allows remote attack…
• CVE-2008-0983lighttpd 1.4.18, and possibly other versions before 1.5.0, d…
• CVE-2008-0984The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earl…
• CVE-2008-0985Heap-based buffer overflow in the GIF library in the WebKit …
• CVE-2008-0986Integer overflow in the BMP::readFromStream method in the li…
• CVE-2008-0988Off-by-one error in the Libsystem strnstr API in libc on App…
• CVE-2008-0989Format string vulnerability in mDNSResponderHelper in Apple …
• CVE-2008-0990notifyd in Apple Mac OS X 10.4.11 does not verify that Mach …
• CVE-2008-0992Array index error in pax in Apple Mac OS X 10.5.2 allows con…
• CVE-2008-0993Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.…
• CVE-2008-0994Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving…