CVE-2006-1985: Buffer Overflow
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1985?
CVE-2006-1985 is classified as a high-severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2006-1985?
To fix CVE-2006-1985, you should update your Apple Safari or macOS to the latest versions that have patched this vulnerability.
What systems are affected by CVE-2006-1985?
CVE-2006-1985 affects various versions of Apple Safari and macOS, including versions 10.4 and earlier.
What type of vulnerability is CVE-2006-1985?
CVE-2006-1985 is a heap-based buffer overflow vulnerability that can be exploited through crafted archive files.
Can CVE-2006-1985 be exploited remotely?
CVE-2006-1985 requires user assistance, meaning the attacker must convince the user to open a malicious archive file to exploit the vulnerability.