Description
Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".
References
- 17951 vdb-entry
- ADV-2006-1779 vdb-entry
- 25597 vdb-entry
- TA06-132A third-party-advisory
- 17321 vdb-entry
- APPLE-SA-2006-05-11 vendor-advisory
- macos-imageio-jpeg-bo(26412) vdb-entry
- 20077 third-party-advisory
- http://drunkenblog.com/drunkenblog-archives/000760.html