PT-2006-2449 · Apple · Cfnetwork+1

Publicado 2006-05-12 · Atualizado 2017-07-20 · CVE-2006-1441

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.4.6

Description The issue is related to an integer overflow in CFNetwork, which allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.

Recommendations For Apple Mac OS X version 10.4.6, update to a newer version to mitigate the risk.

Correção

Identificadores relacionados

CVE-2006-1441

Produtos afetados

Cfnetwork

Macos X

Referências · 9

• http://osvdb.org/25585 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1441 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Correção, Aviso do Fabricante
• http://securityfocus.com/bid/17951 · Nota
• http://securitytracker.com/id?1016082 · Nota
• http://us-cert.gov/cas/techalerts/TA06-132A.html · Nota
• http://secunia.com/advisories/20077 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26406 · Nota
• http://vupen.com/english/advisories/2006/1779 · Nota