Details of VAR-200607-0095

ID

VAR-200607-0095

CVE

CVE-2006-3356

TITLE

Apple OS X mageIO middle TIFFFetchAnyArray Function denial of service vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200607-096

DESCRIPTION

The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469. Mac OS X is prone to a denial-of-service vulnerability

Trust: 1.26

sources: NVD: CVE-2006-3356 // BID: 81543 // VULHUB: VHN-19464

AFFECTED PRODUCTS

vendor:	apple	model:	mac os x	scope:	lte	version:	10.4.7	Trust: 1.0
vendor:	apple	model:	mac os x server	scope:	lte	version:	10.4.7	Trust: 1.0
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.4.7	Trust: 0.6
vendor:	apple	model:	mac os x	scope:	eq	version:	10.4.7	Trust: 0.6
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.4.7	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.4.7	Trust: 0.3

sources: BID: 81543 // CNNVD: CNNVD-200607-096 // NVD: CVE-2006-3356

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2006-3356
value:	LOW
Trust: 1.0
CNNVD:	CNNVD-200607-096
value:	LOW
Trust: 0.6
VULHUB:	VHN-19464
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2006-3356
severity:	LOW
baseScore:	2.6
vectorString:	AV:N/AC:H/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	4.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-19464
severity:	LOW
baseScore:	2.6
vectorString:	AV:N/AC:H/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	4.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-19464 // CNNVD: CNNVD-200607-096 // NVD: CVE-2006-3356

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2006-3356

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200607-096

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200607-096

EXTERNAL IDS

db:	NVD	id:	CVE-2006-3356	Trust: 2.0
db:	VUPEN	id:	ADV-2006-2606	Trust: 1.7
db:	CNNVD	id:	CNNVD-200607-096	Trust: 0.7
db:	XF	id:	27482	Trust: 0.6
db:	BID	id:	81543	Trust: 0.4
db:	VULHUB	id:	VHN-19464	Trust: 0.1

sources: VULHUB: VHN-19464 // BID: 81543 // CNNVD: CNNVD-200607-096 // NVD: CVE-2006-3356

REFERENCES

url:	http://www.security-protocols.com/sp-x31-advisory.php	Trust: 2.0
url:	http://www.vupen.com/english/advisories/2006/2606	Trust: 1.1
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/27482	Trust: 1.1
url:	http://xforce.iss.net/xforce/xfdb/27482	Trust: 0.6
url:	http://www.frsirt.com/english/advisories/2006/2606	Trust: 0.6
url:	https://www.apple.com/osx/	Trust: 0.3

sources: VULHUB: VHN-19464 // BID: 81543 // CNNVD: CNNVD-200607-096 // NVD: CVE-2006-3356

CREDITS

Unknown

Trust: 0.3

sources: BID: 81543

SOURCES

db:	VULHUB	id:	VHN-19464
db:	BID	id:	81543
db:	CNNVD	id:	CNNVD-200607-096
db:	NVD	id:	CVE-2006-3356

LAST UPDATE DATE

2024-08-14T14:53:35.742000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-19464	date:	2017-07-20T00:00:00
db:	BID	id:	81543	date:	2006-07-06T00:00:00
db:	CNNVD	id:	CNNVD-200607-096	date:	2006-08-28T00:00:00
db:	NVD	id:	CVE-2006-3356	date:	2017-07-20T01:32:15.960

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-19464	date:	2006-07-06T00:00:00
db:	BID	id:	81543	date:	2006-07-06T00:00:00
db:	CNNVD	id:	CNNVD-200607-096	date:	2006-07-06T00:00:00
db:	NVD	id:	CVE-2006-3356	date:	2006-07-06T20:05:00