CVE-2008-0046 json
The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific services and applica…
published 2008-03-18 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-0059
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.1%
- EPSS 2.1% chance of exploitation in 30 days, percentile 82%
- public exploits
- 0
- none known
Summary
The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific services and applications" radio button that might cause the user to believe that the button is used to restrict access only to specific services and applications, which might allow attackers to bypass intended access restrictions.
Patch / fix
Exploit prediction
2.14% chance of exploitation in the next 30 days, higher than 82% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
lists.apple.com
/archives/security-announce/2008/Mar/msg00001.html
vendor-advisory, patch
-
exchange.xforce.ibmcloud.com
/vulnerabilities/41317
vdb-entry
-
securityfocus.com
/bid/28304
vdb-entry
-
us-cert.gov
/cas/techalerts/TA08-079A.html
third-party-advisory, us-government-resource
-
vupen.com
/english/advisories/2008/0924/references
vdb-entry
-
secunia.com
/advisories/29420
third-party-advisory
-
securitytracker.com
/id?1019658
vdb-entry
- docs.info.apple.com /article.html?artnum=307562
-
securityfocus.com
/bid/28368
vdb-entry
Sources
- CVE List CVE-2008-0046
- NVD CVE-2008-0046
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.