← Database

CVE-2006-1985

MEDIUM CVSS: 5.1 Published: 2006-04-21 Modified: 2026-06-16

Description

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.

Affected Platforms

Apple SafariApple Mac Os X ServerApple Mac Os X

Weakness Type

CWE-119

References