Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-5710 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple MAC OS X

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
7.5HIGHNVD
EPSS
33.6%
top 3.05%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Apple MAC OS XOpendarwin Darwin Kernel
Timeline
PublishedNov 4
Latest updateMay 1

Description

The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDapple/mac_os_x10.4.8

🔴Vulnerability Details

1
GHSA
GHSA-q4h8-23f5-r5xv: The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8↗2022-05-01
▶

💥Exploits & PoCs

1
Exploit-DB
Apple Airport - 802.11 Probe Response Kernel Memory Corruption (PoC) (Metasploit)↗2006-11-01
▶