First published: Fri Nov 10 2006(Updated: )
The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a file descriptor with an unrecognized file type.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Darwin kernel | =8.8.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-5836 is considered a critical vulnerability due to its potential to cause kernel panics and execute arbitrary code.
To mitigate CVE-2006-5836, users should update their systems to use a patched version of the Darwin kernel.
CVE-2006-5836 specifically affects Apple Mac OS X with the Darwin kernel version 8.8.1.
Exploitation of CVE-2006-5836 may lead to denial of service due to kernel panic, and it could allow an attacker to execute arbitrary code.
CVE-2006-5836 can be exploited by local users with access to unrecognized file types.