Description
Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper.
References
- 23641 vdb-entry
- macosx-bom-directory-traversal(25023) vdb-entry
- 19064 third-party-advisory
- 20060302 Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability third-party-advisory
- 16907 vdb-entry
- ADV-2006-0791 vdb-entry
- APPLE-SA-2006-03-01 vendor-advisory
- TA06-062A third-party-advisory
- http://docs.info.apple.com/article.html?artnum=303382