CVE-2008-2304

CVE-2008-2304 describes a buffer overflow vulnerability in Apple Core Image Fun House 2.0 and earlier, specifically within the CoreImage Examples in Xcode tools prior to version 3.1. This flaw allows user-assisted attackers to execute arbitrary code or cause a denial of service by providing a malformed .funhouse file containing an overly long string XML element. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring user interaction (AC:M) but allowing for remote exploitation (AV:N) with potential impacts on confidentiality, integrity, and availability (C:P/I:P/A:P). While not listed on the KEV catalog and showing no active exploitation or community discussion, a Proof-of-Concept exploit (EDB-6043) is publicly available, indicating the feasibility of exploitation.