PT-2006-2969 · Pkware+1 · Zip+2

Publicado 2006-04-21 · Atualizado 2017-07-20 · CVE-2006-1985

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BOMArchiveHelper version 10.4 (6.3) Build 312 Mac OS X versions prior to 10.4.6

Description The issue allows user-assisted attackers to execute arbitrary code via a crafted archive, such as ZIP, that contains long path names. This triggers an error in the BOMStackPop function.

Recommendations For BOMArchiveHelper version 10.4 (6.3) Build 312, consider avoiding the use of crafted archives until a fix is available. For Mac OS X versions prior to 10.4.6, update to a version later than 10.4.6 to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-1985

Produtos afetados

Bomarchivehelper

Macos X

Zip

Referências · 15

• 🔥 https://exploit-db.com/exploits/27715 · Exploit
• http://securityfocus.com/bid/17951 · Nota
• http://securitytracker.com/id?1016082 · Nota
• http://vupen.com/english/advisories/2006/1452 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Correção, Aviso do Fabricante
• http://osvdb.org/24819 · Nota
• http://secunia.com/advisories/20077 · Aviso do Fabricante
• http://secunia.com/advisories/19686 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25945 · Nota
• http://security-protocols.com/sp-x25-advisory.php · Aviso do Fabricante
• http://security-protocols.com/modules.php?name=News&file=article&sid=3233 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1985 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA06-132A.html · Correção
• http://securityfocus.com/bid/17634 · Nota
• http://vupen.com/english/advisories/2006/1779 · Aviso do Fabricante