CVE		CVE-2008-3623
Status		Candidate
Description		Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces.
Phase		Assigned (12.08.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3623
References		APPLE : APPLE-SA-2008-11-13
		APPLE : APPLE-SA-2008-12-15
		APPLE : APPLE-SA-2009-06-17-1
		BID : 32291
		CERT : TA08-350A
		CONFIRM : http://support.apple.com/kb/HT3298
		CONFIRM : http://support.apple.com/kb/HT3338
		CONFIRM : http://support.apple.com/kb/HT3639
		SECUNIA : 33179
		VUPEN : ADV-2008-3444
		VUPEN : ADV-2009-1621
SecurityVulns:		Apple Mac OS X multiple security vulnerabilities