NetSight
IP …
medium5.1Public exploit code

CVE-2006-1985

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.

Affected products

VendorProductAffected versions
AppleSafari
Versions 2.0, 2.0.1, 2.0.2, 2.0.3
AppleMac Os X
Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5
AppleMac Os X Server
Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5

Weakness classification

CWE-119

References