Description
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/17951 ↗
- http://www.osvdb.org/24819 ↗
- http://www.vupen.com/english/advisories/2006/1779 ↗
- http://www.security-protocols.com/sp-x25-advisory.php ↗
- http://www.us-cert.gov/cas/techalerts/TA06-132A.html ↗
- http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233 ↗
- http://securitytracker.com/id?1016082 ↗
- http://lists.apple.com/archives/security-announce/2006/May/msg00003.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25945 ↗
- http://www.vupen.com/english/advisories/2006/1452 ↗
- http://www.securityfocus.com/bid/17634 ↗
- http://secunia.com/advisories/20077 ↗
- http://secunia.com/advisories/19686 ↗