Description
Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit. NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family.
References
- 17951 vdb-entry
- ADV-2006-1779 vdb-entry
- TA06-132A third-party-advisory
- http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233
- 1016067 vdb-entry
- 24821 vdb-entry
- macosx-cfallocatorallocate-bo(25949) vdb-entry
- APPLE-SA-2006-05-11 vendor-advisory
- macosx-predictorvsetfield-bo(25951) vdb-entry
- ADV-2006-1452 vdb-entry
- 17634 vdb-entry
- 24822 vdb-entry
- 20077 third-party-advisory
- http://www.security-protocols.com/sp-x28-advisory.php
- 19686 third-party-advisory
- http://www.security-protocols.com/sp-x30-advisory.php