CVE-2008-2308
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel...
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information.
- Record
CVE-2008-2308- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information.
- Record
CVE-2008-2308- Updated
- 2026-11-02
EUVDEUVD-2008-2304 No score
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information.
- Record
EUVD-2008-2304- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j2m-xp2x-2v76 No score
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel...
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information.
- Record
GHSA-2j2m-xp2x-2v76- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2308 is a medium vulnerability (CVSS 4.6) in Apple Mac Os X, published July 1, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. No source names a fixed version.
References
support.apple.com/kb/HT2163
vupen.com/english/advisories/2008/1981/references
exchange.xforce.ibmcloud.com/vulnerabilities/43474
lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
securitytracker.com/id?1020390
secunia.com/advisories/30802
securityfocus.com/bid/30018
nvd.nist.gov/vuln/detail/CVE-2008-2308
github.com/advisories/GHSA-2j2m-xp2x-2v76