Description
Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via an enriched text e-mail message with "invalid color information" that causes Mail to allocate and initialize arbitrary classes.
References
- 17951 vdb-entry
- 1016078 vdb-entry
- ADV-2006-1779 vdb-entry
- TA06-132A third-party-advisory
- macos-mail-color-code-execution(26419) vdb-entry
- APPLE-SA-2006-05-11 vendor-advisory
- 25594 vdb-entry
- 20077 third-party-advisory