CVE-2008-2304
Apple Core Image Fun House < 2.0 - Buffer Overflow via String XML Element
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-2304. PoCs published by Adriel T. Desautels.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Core Image Fun House by crafting a malicious XML file with an oversized string. The payload overwrites the return address to achieve arbitrary code execution.
Description
Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a .funhouse file with a string XML element that contains many characters.
Exploits (1)
This exploit targets a buffer overflow vulnerability in Core Image Fun House by crafting a malicious XML file with an oversized string. The payload overwrites the return address to achieve arbitrary code execution.