CVE-2006-1983

N/A
Published: April 21, 2006 at 10:00 PM UTC
Updated: June 16, 2026 at 10:24 PM UTC
2 products affected across 1 vendormacOSMac OS X Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 8%

Description

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit. NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family.

Affected

References (16)

Third Party Advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/19686
Third Party Advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/advisories/20077
VDB Entryx_refsource_SECTRACKPatch
http://securitytracker.com/id?1016067
VDB Entryx_refsource_OSVDB
http://www.osvdb.org/24821
VDB Entryx_refsource_OSVDB
http://www.osvdb.org/24822

CVSS

Confidentiality
NONE
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card