PT-2006-5202 · Apple · Type Services (Ats) Server+1

Published 2006-11-30 · Updated 2011-03-08 · CVE-2006-4398

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.4 through 10.4.8

Description The issue concerns multiple buffer overflows in the Apple Type Services (ATS) server, which can be exploited by local users to execute arbitrary code via crafted service requests.

Recommendations For Mac OS X versions 10.4 through 10.4.8, update to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2006-4398

Affected Products

Type Services (Ats) Server

Macos X

References · 10

• http://secunia.com/advisories/23155 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4398 · Security Note
• http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html · Vendor Advisory
• http://kb.cert.org/vuls/id/800296 · Note
• http://docs.info.apple.com/article.html?artnum=304829 · Note
• http://securitytracker.com/id?1017301 · Note
• http://us-cert.gov/cas/techalerts/TA06-333A.html · Note
• http://osvdb.org/30738 · Note
• http://vupen.com/english/advisories/2006/4750 · Note
• http://securityfocus.com/bid/21335 · Note