CVE-2008-3529: apple iphone_os

CVSS: 10.0v2.0HighModified

AliasesRHSA-2008:0884DEBIAN-CVE-2008-3529DSA-1654-1

Published 12-09-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-3529 is a high (CVSS 10.0) vulnerability in apple iphone_os. EPSS estimates a 23.37% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

23.37%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2008:0886

Timeline

12-09-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

23.37%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 23.37% on 19-09-2026

19-09-202619-10-2026

EPSS score

23.37%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoswindowsVerified
Apple Safari - RSS 'feed://' Buffer Overflow via libxml2 (PoC)
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Redhat4 products

libxml2< 0:2.5.10-13 | < 0:2.6.16-12.5 | < 0:2.6.26-2.1.2.6
libxml2-debuginfo< 0:2.5.10-13 | < 0:2.6.16-12.5 | < 0:2.6.26-2.1.2.6
libxml2-devel< 0:2.5.10-13 | < 0:2.6.16-12.5 | < 0:2.6.26-2.1.2.6
libxml2-python< 0:2.5.10-13 | < 0:2.6.16-12.5 | < 0:2.6.26-2.1.2.6

Apple3 products

iphone_os< 3.0
mac_os_x< 10.5.7 | 10.5.7
safari< 4.0 | ≥ 3.2.0, < 3.2.3

Debian2 products

libxml2< 2.6.32.dfsg-4 | < 2.6.27.dfsg-5
debian_linuxEOL4.0

Canonical1 product

ubuntu_linuxEOL6.06 | 7.04 | 7.10 | 8.04 | 8.10 | 9.04

Xmlsoft1 product

libxml2< 2.7.0

5 vendors · 11 products

References

60 links

www.ubuntu.com/usn/USN-815-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
usn.ubuntu.com/644-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
support.avaya.com/elmodocs2/security/ASA-2008-400.htmX Refsource CONFIRMThird Party Advisory
support.apple.com/kb/HT3639X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/31860Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1X Refsource CONFIRMBroken Link
secunia.com/advisories/32280Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31855Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/1621VDB EntryX Refsource VUPENThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/45085VDB EntryX Refsource XFThird Party Advisory

Show all 60 references

support.apple.com/kb/HT3549X Refsource CONFIRMThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1X Refsource CONFIRMBroken Link
secunia.com/advisories/32807Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlVendor AdvisoryX Refsource APPLEBroken LinkMailing List
secunia.com/advisories/31982Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=461015X Refsource CONFIRMIssue TrackingThird Party AdvisoryREPORT
secunia.com/advisories/31868Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1654Vendor AdvisoryX Refsource DEBIANThird Party Advisory
xmlsoft.org/news.htmlX Refsource MISCRelease NotesVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6103VDB EntrySignatureX Refsource OVALThird Party Advisory
www.vupen.com/english/advisories/2009/1298VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/35074Third Party AdvisoryX Refsource SECUNIA
www.exploit-db.com/exploits/8798ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
secunia.com/advisories/36173Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0884.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.vupen.com/english/advisories/2009/1522VDB EntryX Refsource VUPENThird Party Advisory
securitytracker.com/id?1020855VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/32265Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200812-06.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/33715Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/35056Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/Advisories:rPSA-2008-0325X Refsource CONFIRMBroken Link
sunsolve.sun.com/search/document.do?assetkey=1-26-247346-1Vendor AdvisoryX Refsource SUNALERTBroken Link
lists.apple.com/archives/security-announce/2009/May/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
www.securityfocus.com/bid/31126VDB EntryX Refsource BIDThird Party Advisory
support.avaya.com/elmodocs2/security/ASA-2009-025.htmX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/35379Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33722Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:192Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/32974Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11760VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/36235Third Party AdvisoryX Refsource SECUNIA
www.us-cert.gov/cas/techalerts/TA09-133A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.vupen.com/english/advisories/2009/1297VDB EntryX Refsource VUPENThird Party Advisory
support.apple.com/kb/HT3550X Refsource CONFIRMThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/31558Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT3613X Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2008/2822VDB EntryX Refsource VUPENThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-0886.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2008:0884Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0884.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-3529REPORT
www.cve.org/CVERecord?id=CVE-2008-3529Advisory
nvd.nist.gov/vuln/detail/CVE-2008-3529Advisory
security-tracker.debian.org/tracker/CVE-2008-3529Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities