CVE-2008-3636
Estado: ModificadaAlta (7.2)—
Desbordamiento de entero en un driver de terceros no especificado incluido en Apple iTunes anterior a la 8.0 para Windows, permite a usuarios locales obtener privilegios a través de vectores desconocidos.
CVSS
- Versión: 2.0
- Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 7.2
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.42%
- Percentil entre todas las CVEs puntuadas: 35
- Fecha de la puntuación: 8/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-189
Referencias
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html
- http://securityresponse.symantec.com/avcenter/security/Content/2008.10.07a.html
- http://securitytracker.com/id?1020839
- http://support.apple.com/kb/HT3025
- http://www.gearsoftware.com/support/GEARAspi%20Security%20Information.pdf
- http://www.kb.cert.org/vuls/id/146896
- http://www.securityfocus.com/archive/1/497131/100/0/threaded
- http://www.securityfocus.com/bid/31089
- http://www.securitytracker.com/id?1020997
- http://www.securitytracker.com/id?1020998
- http://www.securitytracker.com/id?1020999
- http://www.symantec.com/avcenter/security/Content/2008.10.07a.html
- http://www.vupen.com/english/advisories/2008/2526
- http://www.vupen.com/english/advisories/2008/2769
- http://www.vupen.com/english/advisories/2008/2770
- http://www.wintercore.com/advisories/advisory_W021008.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6035
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html
- http://securityresponse.symantec.com/avcenter/security/Content/2008.10.07a.html
- http://securitytracker.com/id?1020839
- http://support.apple.com/kb/HT3025
- http://www.gearsoftware.com/support/GEARAspi%20Security%20Information.pdf
- http://www.kb.cert.org/vuls/id/146896
- http://www.securityfocus.com/archive/1/497131/100/0/threaded
- http://www.securityfocus.com/bid/31089
- http://www.securitytracker.com/id?1020997
- http://www.securitytracker.com/id?1020998
- http://www.securitytracker.com/id?1020999
- http://www.symantec.com/avcenter/security/Content/2008.10.07a.html
- http://www.vupen.com/english/advisories/2008/2526
- http://www.vupen.com/english/advisories/2008/2769
- http://www.vupen.com/english/advisories/2008/2770
- http://www.wintercore.com/advisories/advisory_W021008.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6035
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-3636",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-09-11T01:13:10.023",
"references": [
{
"url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html",
"source": "cve@mitre.org"
},
{
"url": "http://securityresponse.symantec.com/avcenter/security/Content/2008.10.07a.html",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1020839",
"source": "cve@mitre.org"
},
{
"url": "http://support.apple.com/kb/HT3025",
"source": "cve@mitre.org"
},
{
"url": "http://www.gearsoftware.com/support/GEARAspi%20Security%20Information.pdf",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/146896",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/497131/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/31089",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1020997",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1020998",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1020999",
"source": "cve@mitre.org"
},
{
"url": "http://www.symantec.com/avcenter/security/Content/2008.10.07a.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2526",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2769",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2770",
"source": "cve@mitre.org"
},
{
"url": "http://www.wintercore.com/advisories/advisory_W021008.html",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6035",
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securityresponse.symantec.com/avcenter/security/Content/2008.10.07a.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1020839",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT3025",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.gearsoftware.com/support/GEARAspi%20Security%20Information.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/146896",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/497131/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/31089",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1020997",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1020998",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1020999",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.symantec.com/avcenter/security/Content/2008.10.07a.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2526",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2769",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2770",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.wintercore.com/advisories/advisory_W021008.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6035",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-189"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\\\.\\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself."
},
{
"lang": "es",
"value": "Desbordamiento de entero en un driver de terceros no especificado incluido en Apple iTunes anterior a la 8.0 para Windows, permite a usuarios locales obtener privilegios a través de vectores desconocidos."
}
],
"lastModified": "2026-06-16T22:56:11.860",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:itunes:*:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A57528B3-69F7-4B76-9B15-2CDA3220F4CC",
"versionEndIncluding": "7.6.1"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.0:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49DC3DDC-8758-4D28-B2D5-161994C0E669"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.1.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D0E3B53-AFAE-47F1-B7E3-395406819357"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.1.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CF3BB89-1AEF-4B00-AF87-C9BAF7E23EDD"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "389B617F-29D2-4171-B4E0-9E65BBFAF369"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "696D5986-155D-446C-A5FE-49C0DF1868AF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3370179D-5E8A-4036-AA23-252674C6D807"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.3:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B71E645-F15B-43FE-931B-819F9ABA89C0"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.4:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E90B5E1A-4D90-4252-8E34-649F33F1A088"
},
{
"criteria": "cpe:2.3:a:apple:itunes:3.0:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D0D1162-36F7-4F7E-94C0-ABB86B9FC4CD"
},
{
"criteria": "cpe:2.3:a:apple:itunes:3.0.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF23791B-F73D-4CF4-BAC3-591FF0F0B0C6"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E74DB1C-208B-42DE-9A5E-E9010140C5B6"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "018AC033-ACF0-496D-96E1-A03CC4162CB3"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A698DDBE-B79B-4F59-AFBC-0A0682B1EF1D"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC9B5471-F1B1-4E8B-B991-FDE231BA30EE"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.2.72:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2899F21-F01F-4C95-93AA-40C528EE56DF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.5:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDD1695A-271B-4832-B4B1-E5A9D7DE4E24"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.6:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9136E8D6-310D-4D4E-A6AC-2F89218B8666"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78A3FEC0-F135-41F9-A260-52157B283B66"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79591197-B671-46B2-9EB2-03A75A838CC1"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.1.30:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2DD1A9D-4AF4-452A-99C2-AE93611C985D"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.8:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DEABC06-3FF2-4B6A-AAFF-F38B00BA2967"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.9:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6514E3F5-3B5D-43BE-A26D-5167B519F3EF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23C49853-8616-4769-90BC-B6D85B24A36E"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C1EC2F5-FBE8-4EC8-9D28-83C736F2DC01"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DDAAC1F-03CA-4DCC-9E9B-A68181261BAC"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5AE8F59-2DF8-403B-BAB9-6465E618897C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F37B39AB-2D5B-417E-BCEF-29C18D386C53"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.3:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1DCEED8-8174-4319-BAA2-E0A70A7EAFC0"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9730866D-DFE9-448F-9D4E-6B21B3942737"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E20BC99A-13FC-446C-A27A-6C2D859C172B"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.5:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD300F1B-EE8F-4606-B024-A14CA2EF4D78"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2690D789-B1DC-40A5-8CC6-BBB499E9A550"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC37C091-02B8-4B39-9253-52C1008ADEC6"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70A4EEE2-1DD2-4936-8939-4683523670B9"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95B58CD1-03CB-4C35-A290-7157941D210D"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A27B736F-317F-4538-AA3B-72D6EF0D2D33"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.3:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "481E736B-0A83-4422-B1D3-4BD0F9565A18"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.5:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BB09ABD-C1F1-4101-BDC2-FC3E8C422631"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7448F89-CC4A-4B18-887F-B47C0B57404C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.2:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2943C2E-0DDD-498A-9439-E9394CB06081"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D41DA19A-4403-40A8-A3DB-01A12FD4F267"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25E7EF0A-D79E-44E3-B0D4-3C6E8F6FD666"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}