PT-2006-2449 · Apple · Cfnetwork+1

Published 2006-05-12 · Updated 2017-07-20 · CVE-2006-1441

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.4.6

Description The issue is related to an integer overflow in CFNetwork, which allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.

Recommendations For Apple Mac OS X version 10.4.6, update to a newer version to mitigate the risk.

Fix

Related Identifiers

CVE-2006-1441

Affected Products

Cfnetwork

Macos X

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-1441 · Security Note
• http://osvdb.org/25585 · Note
• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Patch, Vendor Advisory
• http://securityfocus.com/bid/17951 · Note
• http://securitytracker.com/id?1016082 · Note
• http://us-cert.gov/cas/techalerts/TA06-132A.html · Note
• http://secunia.com/advisories/20077 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26406 · Note
• http://vupen.com/english/advisories/2006/1779 · Note