CVE-2008-2540 Other in n/a

Critical 9.3 Published 3 Jun 2008 Updated 7 Aug 2024

Remote attackers can silently download malware to user directories, leading to arbitrary code execution via untrusted search path vulnerabilities in Windows.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2008-2540?

CVE-2008-2540 is a critical vulnerability in Apple Safari, published on 3 Jun 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a "Carpet Bomb" and a "Blended Threat Elevation of Privilege Vulnerability," a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X.

Weakness: CWE-264

Which versions are affected by CVE-2008-2540?

It affects 1 product.

Products include Apple Safari.

How do I fix CVE-2008-2540?

No fix has been published for CVE-2008-2540 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-2540 being exploited?

There is no known exploitation of CVE-2008-2540 in the wild and no public exploit code.

All Apple Safari vulnerabilities

Sources

Also known as GHSA-6mfp-r743-cc3p.