CVE-2008-3637

The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows…

published September 26, 2008

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to execute arbitrary code via a crafted applet, related to an "error checking issue."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05732 · 93.0th percentile
Published
2008-09-26T16:00Z
EPSS history
Timeline
  • 26 SEP 16:00Z
    The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows…
    cvelistv5