Apple Mac OS X DMG UFS byte_swap_sbin() function Integer Overflow

Overview The Apple Mac OS X byteswapsbin function contains an integer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description DMG files are disk images that can contain a variety of...

MOAB-12-01-2007: Apple DMG UFS ufs_lookup() Denial of Service Vulnerability

Summary A specially crafted UFS filesystem in a DMG image can cause the ufslookup function to call ufsdirbad when a corrupted directory entry is being read, leading to a kernel panic denial of service. This issue can't lead to arbitrary code execution. Affected versions This issue has been verifi...

MOAB-10-01-2007: Apple DMG UFS ffs_mountfs() Integer Overflow Vulnerability

Summary The ffsmountfs function, part of the UFS filesystem handling code shared between FreeBSD and Mac OS X XNU is affected by an integer overflow vulnerability, leading to an exploitable denial of service condition and potential arbitrary code execution. This issue is related to those publishe...

Apple Mac OSX 10.4.8 - DMG UFS Byte_Swap_Sbin() Integer Overflow

source: https://www.securityfocus.com/bid/22022/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to cause kernel panic, resultin...

CVE-2006-5824

Integer overflow in the ffsrdextattr function in FreeBSD 6.1 allows local users to cause a denial of service kernel panic and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross...

CVE-2006-5824

Integer overflow in the ffsrdextattr function in FreeBSD 6.1 allows local users to cause a denial of service kernel panic and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross...

CVE-2006-5824

CVE-2006-5824 affects FreeBSD 6.1; integer overflow in the ffs_rdextattr function can be triggered by a crafted UFS filesystem to cause a local denial of service (kernel panic) and a heap-based buffer overflow. The entry notes this is a different issue from CVE-2006-5679, and that third parties s...

CVE-2006-5726

alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service memory corruption by mounting crafted UFS filesystems with malformed data structures...

CVE-2006-5726

CVE-2006-5726 affects the UFS filesystem in Solaris 10. The vulnerability is triggered by the alloccgblk function when mounting crafted UFS filesystems with malformed data structures, allowing local users to cause a denial of service through memory corruption. The published entries (NVD, CVE, CVE...

CVE-2006-5726

alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service memory corruption by mounting crafted UFS filesystems with malformed data structures...

CVE-2006-5679

Integer overflow in the ffsmountfs function in FreeBSD 6.1 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmemalloc function. NOTE: a third party states that...

CVE-2006-5679

CVE-2006-5679 describes an integer overflow in the FreeBSD ffs_mountfs function (and related OS X/FreeBSD UFS handling) that can cause a local denial of service (panic) and potentially arbitrary code execution when a crafted UFS disk image is mounted. Affected: Mac OS X 10.4.x and FreeBSD 6.1, wh...