NVD

Id
64622  
Name
CVE-2006-6061  
Description
com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via a malformed DMG image that triggers memory corruption. NOTE: the severity of this issue has been disputed by a third party, who states that the impact is limited to a denial of service (kernel panic) due to a vm_fault call with a non-aligned address.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-11-21  
Modified Date
2011-03-07  
Seq
2006-6061  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337274 64622 CVE-2006-6061 http://alastairs-place.net/2006/11/dmg-vulnerability/  View
337275 64622 CVE-2006-6061 http://docs.info.apple.com/article.html?artnum=305214  View
337276 64622 CVE-2006-6061 http://kernelfun.blogspot.com/2006/11/more-mokb-20-11-2006-related-news.html  View
337277 64622 CVE-2006-6061 APPLE-SA-2007-03-13  View
337278 64622 CVE-2006-6061 http://projects.info-pull.com/mokb/MOKB-20-11-2006.html  View
337279 64622 CVE-2006-6061 1017260  View
337280 64622 CVE-2006-6061 VU#367424  View
337281 64622 CVE-2006-6061 http://www.matasano.com/log/633/alastair-houghton-debunks-lmh-mokb-finding/  View
337282 64622 CVE-2006-6061 21201  View
337283 64622 CVE-2006-6061 1017751  View
337284 64622 CVE-2006-6061 TA07-072A  View
337285 64622 CVE-2006-6061 ADV-2006-4629  View
337286 64622 CVE-2006-6061 ADV-2007-0930  View
337287 64622 CVE-2006-6061 macosx-dmg-code-execution(30440)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58593 JVNDB-2006-000789 Apple Mac OS X における DMG ファイルの取扱いに関する脆弱性 Apple Mac OS X の com.apple.AppleDiskImageController には、巧妙に細工された DMG ファイルを取扱う際にメモリ破損が発生する脆弱性が存在します。 CVE-2006-6061 22163 CVE-2006-6061 64622 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000789.html 2006-11-24 2007-04-01 View