CVE-2008-6252

CVE-2008-6252 describes a stack-based buffer overflow vulnerability in smcFanControl version 2.1.2. A local attacker can exploit this flaw by providing a specially crafted, long -k option to the smc program, leading to arbitrary code execution and privilege escalation. With a CVSS score of 7.2, this vulnerability is considered highly severe due to its low attack complexity and complete impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.