Description
Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions.
References
- 17951 vdb-entry
- ADV-2006-1779 vdb-entry
- TA06-132A third-party-advisory
- 25587 vdb-entry
- APPLE-SA-2006-05-11 vendor-advisory
- macos-corefoundation-integer-underflow(26408) vdb-entry
- 20077 third-party-advisory
- 1016080 vdb-entry