Description
Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.
References
- APPLE-SA-2006-06-27 vendor-advisory
- 1016397 vdb-entry
- 18686 vdb-entry
- macosx-launchd-format-string(27479) vdb-entry
- 20060629 DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability' mailing-list
- 26933 vdb-entry
- 20877 third-party-advisory
- ADV-2006-2566 vdb-entry
- 18724 vdb-entry