CVE-2008-1391

CVE-2008-1391 describes multiple integer overflow vulnerabilities within the libc library affecting NetBSD 4.x, FreeBSD 6.x and 7.x, and potentially other BSD and Apple Mac OS platforms. These overflows occur in the strfmon and printf functions when processing large integer values in format arguments, allowing context-dependent attackers to execute arbitrary code. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, an exploit for strfmon() integer overflow exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.