← back
CVE-2006-1985

CVE-2006-1985

EPSS 13.9%
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27715unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2006/May/msg00003.htmlhttp://secunia.com/advisories/19686http://secunia.com/advisories/20077http://securitytracker.com/id?1016082https://exchange.xforce.ibmcloud.com/vulnerabilities/25945http://www.osvdb.org/24819http://www.securityfocus.com/bid/17634http://www.securityfocus.com/bid/17951http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233http://www.security-protocols.com/sp-x25-advisory.phphttp://www.us-cert.gov/cas/techalerts/TA06-132A.htmlhttp://www.vupen.com/english/advisories/2006/1452