Apple Mac OSX 10 - CD9660.Util Probe For Mounting Argument Local Buffer Overflow
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | Apple Mac OS X USB Keyboard Ctrl Key Root Access (Apple SA 2003-12-19) | 10 Aug 200400:00 | – | nessus |
| Mac OS X Multiple Vulnerabilities (Security Update 2003-12-19) | 6 Jul 200400:00 | – | nessus |
 | CVE-2003-1006 | 10 Mar 200405:00 | – | cve |
 | CVE-2003-1006 | 10 Mar 200405:00 | – | cvelist |
 | EUVD-2003-0996 | 7 Oct 202500:30 | – | euvd |
 | CVE-2003-1006 | 29 Mar 200405:00 | – | nvd |
 | Apple Mac OS X "cd9660.util" buffer overflow | 15 Mar 200400:00 | – | cert |
source: https://www.securityfocus.com/bid/9228/info
The cd9660.util utility has been reported prone to a local buffer overrun vulnerability. Excessive data supplied as an argument for the probe for mounting switch, passed to the cd9660.util utility will overrun the bounds of a reserved buffer in memory. Because memory adjacent to this buffer has been reported to contain saved values that are crucial to controlling execution flow, a local attacker may potentially influence cd9660.util execution flow into attacker-supplied instructions.
./cd9660.util -p `perl -e "print 'A'x512"`Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Dec 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.2
EPSS0.01292