medium5.0Public exploit code
CVE-2006-2277
Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (application crash) via a crafted OpenEXR (.exr)…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX 10.x - ImageIO OpenEXR Image File Remote Denial of Service2006-05-01 · dos · osx · Verified
Impact
Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (application crash) via a crafted OpenEXR (.exr) image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | Versions 10.4, 10.4.1, 10.4.2, 10.4.3, 10.4.4, 10.4.5 |
References
- NVD record
- CVE.org record
- http://www.osvdb.org/27780
- http://www.securityfocus.com/archive/1/432587/100/0/threaded
- http://www.securityfocus.com/bid/17768
- https://github.com/openexr/openexr/issues/564
- http://www.osvdb.org/27780
- http://www.securityfocus.com/archive/1/432587/100/0/threaded
- http://www.securityfocus.com/bid/17768
- https://github.com/openexr/openexr/issues/564