20060913 [NETRAGARD-20060822 SECURITY ADVISORY] [ APPLE COMPUTER CORPORATION KEXTLOAD VULNERABILITY + ROXIO TOAST TITANUM 7 HELPER APP - LOCAL ROOT COMROMISE]mailing list
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html CVE-2006-4866
Apple Mac OSX 10.x - KExtLoad Buffer Overflow
Record summary
CVE-2006-4866 has a selected CVSS score of 4.6; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBApple Mac OSX 10.x - KExtLoad Buffer OverflowExploitDB exploitby Adriel T. DesautelsNot analyzed1 file
References
4netragard.com
http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt 20034vdb entry
http://www.securityfocus.com/bid/20034 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-4866