CVE-2006-1469
published 2006-06-27CVE-2006-1469: Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary…
PriorityP431high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
4.79%
91.0th percentile
Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | <= 10.4.7 | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x_server | <= 10.4.7 | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rv4w-xqjc-ghjp: The TIFFFetchAnyArray function in ImageIO in Apple OS X 10
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2006-3356 [HIGH] GHSA-rv4w-xqjc-ghjp: The TIFFFetchAnyArray function in ImageIO in Apple OS X 10
The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469.
GHSA
GHSA-rw3r-8cf8-gc47: Stack-based buffer overflow in ImageIO in Apple Mac OS X 10
ghsa_unreviewed·2022-05-01
CVE-2006-1469 [HIGH] CWE-119 GHSA-rw3r-8cf8-gc47: Stack-based buffer overflow in ImageIO in Apple Mac OS X 10
Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.htmlhttp://secunia.com/advisories/20877http://securitytracker.com/id?1016394http://www.kb.cert.org/vuls/id/988356http://www.osvdb.org/26931http://www.securityfocus.com/bid/18686http://www.securityfocus.com/bid/18731http://www.vupen.com/english/advisories/2006/2566https://exchange.xforce.ibmcloud.com/vulnerabilities/27478http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.htmlhttp://secunia.com/advisories/20877http://securitytracker.com/id?1016394http://www.kb.cert.org/vuls/id/988356http://www.osvdb.org/26931http://www.securityfocus.com/bid/18686http://www.securityfocus.com/bid/18731http://www.vupen.com/english/advisories/2006/2566https://exchange.xforce.ibmcloud.com/vulnerabilities/27478
2006-06-27
Published