CVE-2006-1982

HIGH 7.5CVE-2006-1982 · Published 21/04/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images.

References

docs.info.apple.com/article.html · Patch
lists.apple.com/archives/security-announce/2006/May/msg00003.html · Patch
secunia.com/advisories/19686 · Vendor Advisory
secunia.com/advisories/20077 · Patch
osvdb.org/31837
security-protocols.com/modules.php
security-protocols.com/sp-x24-advisory.php · Patch
securityfocus.com/bid/17634 · Exploit
securityfocus.com/bid/17951
us-cert.gov/cas/techalerts/TA06-132A.html · Patch
vupen.com/english/advisories/2006/1452 · Vendor Advisory
vupen.com/english/advisories/2006/1779 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free