CVE-2008-0038
Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be...
Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.
Exploit likelihood
What each source reports
NVD Score used
Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.
- Record
CVE-2008-0038- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.
- Record
CVE-2008-0038- Updated
- 2026-11-02
EUVDEUVD-2008-0051 No score
Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.
- Record
EUVD-2008-0051- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x6fq-gm98-pgx4 No score
Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be...
Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.
- Record
GHSA-x6fq-gm98-pgx4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0038 is a low vulnerability (CVSS 1.9) in Apple Mac Os X, published February 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.
References
docs.info.apple.com/article.html?artnum=307430
secunia.com/advisories/28891
vupen.com/english/advisories/2008/0495/references
securityfocus.com/bid/27736
us-cert.gov/cas/techalerts/TA08-043B.html
securitytracker.com/id?1019360
lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
nvd.nist.gov/vuln/detail/CVE-2008-0038
github.com/advisories/GHSA-x6fq-gm98-pgx4