← Voltar para CVEs

CVE-2006-1985

N/A

Descricao

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado4/21/2006

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

apple:mac_os_xapple:mac_os_x_serverapple:safari

Fraquezas (CWE)

CWE-119

Referencias

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html(cve@mitre.org)

http://secunia.com/advisories/19686(cve@mitre.org)

http://secunia.com/advisories/20077(cve@mitre.org)

http://securitytracker.com/id?1016082(cve@mitre.org)

http://www.osvdb.org/24819(cve@mitre.org)

http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233(cve@mitre.org)

http://www.security-protocols.com/sp-x25-advisory.php(cve@mitre.org)

http://www.securityfocus.com/bid/17634(cve@mitre.org)

http://www.securityfocus.com/bid/17951(cve@mitre.org)

http://www.us-cert.gov/cas/techalerts/TA06-132A.html(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/1452(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/1779(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/25945(cve@mitre.org)

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/19686(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/20077(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1016082(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/24819(af854a3a-2127-422b-91ae-364da2661108)

http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233(af854a3a-2127-422b-91ae-364da2661108)

http://www.security-protocols.com/sp-x25-advisory.php(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/17634(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/17951(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA06-132A.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/1452(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/1779(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/25945(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.