Info

Disclosure

Apr 19, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in the Mac OS X default handler for files with a '.tiff' extension. The '_cg_TIFFSetField' and 'PredictorVSetField' functions fail to properly validate input, resulting in a heap overflow. With a specially crafted file, an attacker can cause the applicaton to crash and potentially execute arbitrary code on the victim's system, resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Unknown

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Apple Computer, Inc.

Mac OS X

10.4.6

References

Bugtraq ID: 17634
Secunia Advisory ID: 19686
CVE ID: 2006-1984 (see also: NVD)
Related OSVDB ID: 24819 24820 24821 24823
VUPEN Advisory: ADV-2006-1452
Vendor Specific Advisory URL: http://lists.apple.com/archives/security-announce/2006/May/msg00003.html
Vendor URL: http://www.apple.com/macosx/
Other Advisory URL: http://www.security-protocols.com/sp-x29-advisory.php
http://www.security-protocols.com/sp-x30-advisory.php
CERT: TA06-132A

Credit

Tom Ferris - tommysecurity-protocols.com - Security-Protocols

Direct URL: http://osvdb.org/24822