Vulnerability Name:

CVE-2006-1469 (CCN-27478)

Assigned:2006-06-27
Published:2006-06-27
Updated:2017-07-20
Summary:Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-119
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2006-1469

Source: CCN
Type: Mac OS X 10.4.7 Update
About the security content of the Mac OS X 10.4.7 Update

Source: APPLE
Type: UNKNOWN
APPLE-SA-2006-06-27

Source: CCN
Type: Apple Security-Announce Mailing List, Tue, 27 Jun 2006 13:16:56 -0700
APPLE-SA-2006-06-27 Mac OS X v10.4.7

Source: CCN
Type: SA20877
Mac OS X Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
20877

Source: CCN
Type: SECTRACK ID: 1016394
Apple Mac OS X ImageIO Stack Overflow in Processing TIFF Images Lets Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: UNKNOWN
1016394

Source: CCN
Type: US-CERT VU#988356
Apple Mac OS X vulnerable to stack-based buffer overflow via specially crafted TIFF file

Source: CERT-VN
Type: US Government Resource
VU#988356

Source: OSVDB
Type: UNKNOWN
26931

Source: CCN
Type: OSVDB ID: 26931
Apple Mac OS X ImageIO TIFF Processing Overflow

Source: CCN
Type: OSVDB ID: 36994
Apple Mac OS X ImageIO TIFFFetchAnyArray Function TIFF Handling DoS

Source: BID
Type: UNKNOWN
18686

Source: CCN
Type: BID-18686
Retired: Apple Mac OS X Multiple Security Vulnerabilities

Source: BID
Type: UNKNOWN
18731

Source: CCN
Type: BID-18731
Apple Mac OS X ImageIO TIFF Images Remote Buffer Overflow Vulnerability

Source: VUPEN
Type: Vendor Advisory
ADV-2006-2566

Source: XF
Type: UNKNOWN
macosx-imageio-tiff-bo(27478)

Source: XF
Type: UNKNOWN
macosx-imageio-tiff-bo(27478)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    apple mac os x 10.4
    apple mac os x 10.4.1
    apple mac os x 10.4.2
    apple mac os x 10.4.3
    apple mac os x 10.4.4
    apple mac os x 10.4.5
    apple mac os x 10.4.6
    apple mac os x server 10.4
    apple mac os x server 10.4.1
    apple mac os x server 10.4.2
    apple mac os x server 10.4.3
    apple mac os x server 10.4.4
    apple mac os x server 10.4.5
    apple mac os x server 10.4.6
    apple mac os x 10.4
    apple mac os x 10.4.1
    apple mac os x server 10.4.1
    apple mac os x server 10.4
    apple mac os x server 10.4.2
    apple mac os x 10.4.2
    apple mac os x 10.4.4
    apple mac os x 10.4.3
    apple mac os x server 10.4.3
    apple mac os x server 10.4.4
    apple mac os x 10.4.5
    apple mac os x server 10.4.5
    apple mac os x 10.4.6
    apple mac os x server 10.4.6
    apple mac os x 10.4.10
    apple mac os x server 10.4.10
    apple mac os x 10.4.11
    apple mac os x server 10.4.11