CVE-2006-5710: Buffer Overflow

Published Nov 4, 2006

Updated

The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow.

Affected Software

2 affected components

Opendarwin Darwin Kernel=8.8.0

Apple iOS and macOS=10.4.8

Event History

Nov 4, 2006

CVE Published

01:07 AM

Data Sourced

via NVD·01:07 AM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5710?

CVE-2006-5710 is considered a high severity vulnerability due to the potential for remote code execution.

How do I fix CVE-2006-5710?

To fix CVE-2006-5710, update your macOS to a version that addresses this vulnerability such as patches released after 10.4.8.

Who is affected by CVE-2006-5710?

CVE-2006-5710 affects users running Darwin kernel 8.8.0 and Mac OS X 10.4.8, particularly on certain Orinoco based Airport cards.

Can CVE-2006-5710 be exploited remotely?

Yes, CVE-2006-5710 can be exploited remotely through malicious 802.11 probe response frames.

What kind of attack is enabled by CVE-2006-5710?

CVE-2006-5710 enables attackers to execute arbitrary code on the affected systems.