NVD脆弱性詳細

CVE-2006-1985

概要	Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.
公表日	2006年4月22日7:02
登録日	2021年1月29日15:36
最終更新日	2017年7月20日10:31

CVSS2.0 : MEDIUM
スコア	5.1
ベクター	AV:N/AC:H/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	高
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	はい
その他の権限を取得	いいえ
ユーザー操作が必要	はい

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:apple:safari:2.0:::::::*
cpe:2.3:a:apple:safari:2.0.1:::::::*
cpe:2.3:a:apple:safari:2.0.2:::::::*
cpe:2.3:a:apple:safari:2.0.3:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:o:apple:mac_os_x:10.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.6:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.7:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.8:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.9:::::::*
cpe:2.3:o:apple:mac_os_x:10.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.6:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.6:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.7:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.8:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.9:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.6:::::::*

関連情報、対策とツール

No	URL	refsource	タグ
1	http://lists.apple.com/archives/security-announce/2006/May/msg00003.html	APPLE	Patch
2	http://secunia.com/advisories/19686	SECUNIA	Vendor Advisory
3	http://secunia.com/advisories/20077	SECUNIA	Patch Vendor Advisory
4	http://securitytracker.com/id?1016082	SECTRACK
5	http://www.osvdb.org/24819	OSVDB
6	http://www.securityfocus.com/bid/17634	BID
7	http://www.securityfocus.com/bid/17951	BID
8	http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233	MISC
9	http://www.security-protocols.com/sp-x25-advisory.php	MISC	Patch Vendor Advisory
10	http://www.us-cert.gov/cas/techalerts/TA06-132A.html	CERT	Patch Third Party Advisory US Government Resource
11	http://www.vupen.com/english/advisories/2006/1452	VUPEN	Vendor Advisory
12	http://www.vupen.com/english/advisories/2006/1779	VUPEN	Vendor Advisory
13	https://exchange.xforce.ibmcloud.com/vulnerabilities/25945	XF

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

構成2	以上	以下	より上	未満
cpe:2.3:o:apple:mac_os_x:10.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.6:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.7:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.8:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.9:::::::*
cpe:2.3:o:apple:mac_os_x:10.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.6:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.6:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.7:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.8:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.9:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.6:::::::*