OSVDB ID: 25587

Title: Apple Mac OS X CFStringGetFileSystemRepresentation Integer Underflow

Info

Disclosure
May 08, 2006

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 An local underflow exists in Mac OS X. The CFStringGetFileSystemRepresentation API fails to validate unspecified input resulting in an integer underflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Install Apple Security Update 2006-003, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Apple Computer, Inc.

Mac OS X

 10.3.x
10.4
10.4.1
10.4.2
10.4.3
10.4.4
10.4.5
10.4.6

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/25587