CVE

Id
19606  
CVE No.
CVE-2006-3502  
Status
Candidate  
Description
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled.  
Phase
Assigned (20060710)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
177234 19606 CVE-2006-3502 APPLE:APPLE-SA-2006-08-01  View
177235 19606 CVE-2006-3502 URL:http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html  View
177236 19606 CVE-2006-3502 CERT:TA06-214A  View
177237 19606 CVE-2006-3502 URL:http://www.us-cert.gov/cas/techalerts/TA06-214A.html  View
177238 19606 CVE-2006-3502 CERT-VN:VU#651844  View
177239 19606 CVE-2006-3502 URL:http://www.kb.cert.org/vuls/id/651844  View
177240 19606 CVE-2006-3502 BID:19289  View
177241 19606 CVE-2006-3502 URL:http://www.securityfocus.com/bid/19289  View
177242 19606 CVE-2006-3502 VUPEN:ADV-2006-3101  View
177243 19606 CVE-2006-3502 URL:http://www.vupen.com/english/advisories/2006/3101  View
177244 19606 CVE-2006-3502 OSVDB:27741  View
177245 19606 CVE-2006-3502 URL:http://www.osvdb.org/27741  View
177246 19606 CVE-2006-3502 SECUNIA:21253  View
177247 19606 CVE-2006-3502 URL:http://secunia.com/advisories/21253  View
177248 19606 CVE-2006-3502 XF:macosx-imageio-gif-code-execution(28144)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58753 JVNDB-2006-001019 LaunchServices の Download Validation における Javascript を実行される脆弱性 LaunchServices の Download Validation は、特定の HTML を "安全" と識別するため、Safari 上で "ダウンロード後に安全なファイルを開く" オプションが有効になっている際、ローカルコンテキスト内の Javascript を実行される脆弱性が存在します。 CVE-2006-3504 19606 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001019.html  View