Lucene search

K
cveMitreCVE-2006-3497
HistoryAug 02, 2006 - 4:04 p.m.

CVE-2006-3497

2006-08-0216:04:00
mitre
web.nvd.nist.gov
28
cve-2006-3497
vulnerability
compression state handling
bom
apple
mac os x
denial of service
application crash
arbitrary code
zip archive

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.019

Percentile

88.7%

Unspecified vulnerability in the “compression state handling” in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Zip archive.

Affected configurations

Nvd
Node
applemac_os_xMatch10.3.9
OR
applemac_os_xMatch10.4.7
OR
applemac_os_x_serverMatch10.3.9
OR
applemac_os_x_serverMatch10.4.7
VendorProductVersionCPE
applemac_os_x10.3.9cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*
applemac_os_x10.4.7cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*
applemac_os_x_server10.3.9cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*
applemac_os_x_server10.4.7cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.019

Percentile

88.7%

Related for CVE-2006-3497