Ref: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025 (under review)
This is apparently a different issue than bug 245650 (CVE-2008-4933).
A vulnerability has been reported in the Linux Kernel, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.
The vulnerability is caused due to a boundary error in the "hfs_cat_find_brec()" function and can be exploited to cause a buffer overflow via an overly large catalog name length.
Successful exploitation requires that a user is tricked into mounting a specially crafted hfs image.
The vulnerability is reported in versions prior to 18.104.22.168.
*** Bug 247574 has been marked as a duplicate of this bug. ***