NetSight
IP …
critical9.3

CVE-2009-1726

Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of…

Impact

Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image containing an embedded ColorSync profile.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.5.6, 10.4.11, 10.5, 10.5.0, 10.5.1, 10.5.2
AppleMac Os X Server
Versions 10.4.11, 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3

Weakness classification

CWE-119

References