CVE-2006-1985

No fix known EPSS 14%

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.

Published 2006-04-21 · CVE record · OSV

Products: apple safari, apple mac_os_x, apple mac_os_x_server