medium4.6Public exploit code
CVE-2006-4866
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX 10.x - KExtLoad Buffer Overflow2006-09-14 · dos · osx · Verified
Impact
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1 |
| Apple | Mac Os X Server | Versions 10.0, 10.1, 10.1.1, 10.1.2, 10.1.3, 10.1.4 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html
- http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt
- http://www.securityfocus.com/bid/20034
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html
- http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt
- http://www.securityfocus.com/bid/20034