Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-2277 — Apple MAC OS X vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
9.5%
top 7.15%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Apple MAC OS X
Timeline
PublishedMay 10
Latest updateMay 1

Description

Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (application crash) via a crafted OpenEXR (.exr) image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/mac_os_x7 versions+6

🔴Vulnerability Details

1
GHSA
GHSA-gf7r-vcch-gjv6: Multiple Apple Mac OS X 10↗2022-05-01
▶

💥Exploits & PoCs

1
Exploit-DB
Apple Mac OSX 10.x - ImageIO OpenEXR Image File Remote Denial of Service↗2006-05-01
▶