CVE-2006-1983

Mac OS X - Heap-Based Buffer Overflow via TIFF or GIF Image Parsing

Title source: llm

Description

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit. NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family.

References (16)

Core 16

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/17951

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/1779

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Exploit x_refsource_misc

http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233

Patch vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016067

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/24821

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/25949

Patch vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/25951

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/1452

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/17634

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/24822

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20077

Vendor Advisory x_refsource_misc

http://www.security-protocols.com/sp-x28-advisory.php

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19686

Vendor Advisory x_refsource_misc

http://www.security-protocols.com/sp-x30-advisory.php

Scores

EPSS 0.0792

EPSS Percentile 94.1%

Details

CWE

CWE-119

Status published

Products (34)

apple/mac_os_x 10.3

apple/mac_os_x 10.3.1

apple/mac_os_x 10.3.2

apple/mac_os_x 10.3.3

apple/mac_os_x 10.3.4

apple/mac_os_x 10.3.5

apple/mac_os_x 10.3.6

apple/mac_os_x 10.3.7

apple/mac_os_x 10.3.8

apple/mac_os_x 10.3.9

... and 24 more

Published Apr 21, 2006

Tracked Since Feb 18, 2026