CVE-2006-1983: Buffer Overflow
Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit. NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1983?
CVE-2006-1983 is classified with a medium severity level due to its potential to cause denial of service and possible arbitrary code execution.
How do I fix CVE-2006-1983?
To fix CVE-2006-1983, update your Mac OS X to a version later than 10.4.6, as Apple released patches for this vulnerability.
What versions of Mac OS X are affected by CVE-2006-1983?
CVE-2006-1983 affects Mac OS X versions 10.4.6 and earlier, as well as various earlier versions of Mac OS X Server.
What types of attacks can CVE-2006-1983 enable?
CVE-2006-1983 may enable remote attackers to execute arbitrary code or cause a denial of service in affected applications using ImageIO or AppKit.
Is CVE-2006-1983 still a significant risk today?
CVE-2006-1983 is less of a risk today due to the discontinuation of support for the affected versions, but users on those systems remain vulnerable.