NetSight
IP …
high7.5Public exploit code

CVE-2006-1982

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attacke…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5
AppleMac Os X Server
Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5

Weakness classification

CWE-119

References