← Database

CVE-2006-1442

HIGH CVSS: 7.5 Published: 2006-05-12 Modified: 2026-06-16

Description

The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle.

Affected Platforms

Apple Mac Os X

Weakness Type

NVD-CWE-Other

References