PT-2006-2967 · Apple · Imageio+2

Publicado 2006-04-21 · Atualizado 2017-07-20 · CVE-2006-1983

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.4.6

Description The issue is related to multiple heap-based buffer overflows that can be triggered remotely, potentially leading to a denial of service or the execution of arbitrary code. This is possible through the PredictorVSetField function for TIFF or the CFAllocatorAllocate function for GIF, as used in applications that utilize ImageIO or AppKit.

Recommendations For Mac OS X versions prior to 10.4.6, update to a version later than 10.4.6 to resolve the issue. As a temporary workaround, consider restricting the use of ImageIO or AppKit in applications to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-1983

Produtos afetados

Appkit

Imageio

Macos X

Referências · 17

• 🔥 http://security-protocols.com/modules.php?name=News&file=article&sid=3233 · Exploit
• 🔥 http://securityfocus.com/bid/17634 · Exploit
• http://securityfocus.com/bid/17951 · Nota
• http://secunia.com/advisories/20077 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-1983 · Nota de Segurança
• http://osvdb.org/24821 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25951 · Nota
• http://vupen.com/english/advisories/2006/1779 · Aviso do Fabricante
• http://security-protocols.com/sp-x30-advisory.php · Aviso do Fabricante
• http://security-protocols.com/sp-x28-advisory.php · Aviso do Fabricante
• http://securitytracker.com/id?1016067 · Correção
• http://vupen.com/english/advisories/2006/1452 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Correção, Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25949 · Nota
• http://secunia.com/advisories/19686 · Aviso do Fabricante