CVE-2006-6353

BOMArchiveHelper - Denial of Service via Malformed Archive Processing

Title source: llm

Description

Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (application crash) via unspecified vectors related to (1) certain KERN_PROTECTION_FAILURE thread crashes and (2) certain KERN_INVALID_ADDRESS thread crashes, as discovered with the "iSec Partners FileP fuzzer".

References (2)

Core 2

Core References

Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/21446

Exploit, Vendor Advisory x_refsource_misc

http://security-protocols.com/2006/12/04/bomarchivehelper-needs-some-lovin/

Scores

EPSS 0.0117

EPSS Percentile 64.3%

Details

Status published

Products (3)

apple/bomarchivehelper

apple/mac_os_x 10.4.8

apple/mac_os_x_server 10.4.8

Published Dec 07, 2006

Tracked Since Feb 18, 2026