CVE-2006-3497: Medium severity Apple iOS and macOS vulnerability
Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Zip archive.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3497?
CVE-2006-3497 has a severity level that implies a potential denial of service and the possibility of arbitrary code execution.
How do I fix CVE-2006-3497?
To fix CVE-2006-3497, you should update your Mac OS X to the latest version available to mitigate the vulnerability.
Who is affected by CVE-2006-3497?
CVE-2006-3497 affects users of Apple Mac OS X versions 10.3.9 and 10.4.7, including the Server versions.
What types of attacks does CVE-2006-3497 enable?
CVE-2006-3497 enables user-assisted attackers to cause application crashes and potentially execute arbitrary code via crafted Zip archives.
Is there a workaround for CVE-2006-3497?
While there is no specific workaround for CVE-2006-3497, avoiding the use of suspicious Zip archives can reduce risk.