Apple Mac OS X ImageIO TIFF Images Remote Buffer Overflow Vulnerability

Bugtraq ID:	18731
Class:	Boundary Condition Error
CVE:	CVE-2006-1469
Remote:	Yes
Local:	No
Published:	Jun 27 2006 12:00AM
Updated:	Jun 30 2006 12:59AM
Credit:	This issue was disclosed in the referenced vendor advisory.
Vulnerable:	Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4
Not Vulnerable:	Apple Mac OS X Server 10.4.7 Apple Mac OS X 10.4.7

Apple Mac OS X ImageIO TIFF Images Remote Buffer Overflow Vulnerability

Mac OS X is prone to a buffer-overflow vulnerability. This issue is due to a stack-based buffer-overflow that results in a buffer being overrun with attacker-supplied data.

This issue allows remote attackers to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely crash the application, denying service to legitimate users.

This issue was initially discussed in BID 18686 (Apple Mac OS X Multiple Security Vulnerabilities), which has been split into individual BIDs to discuss each issue separately.

Apple Mac OS X ImageIO TIFF Images Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Apple Mac OS X ImageIO TIFF Images Remote Buffer Overflow Vulnerability

Solution:
The vendor has released Mac OS X version 10.4.7 to address this issue.


Apple Mac OS X Server 10.4

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4

• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.1

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.1

• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.2

• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.2

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.3

• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.3

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.4

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.4

• Apple MacOSXUpdCombo10.4.7Intel.dmg
  http://www.apple.com/support/downloads/


• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.5

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.5

• Apple MacOSXUpdCombo10.4.7Intel.dmg
  http://www.apple.com/support/downloads/


• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.6

• Apple MacOSXServerUpdate10.4.7.dmg
  http://www.apple.com/support/downloads/


• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.6

• Apple MacOSXUpd10.4.7Intel.dmg
  for Intel
  http://www.apple.com/support/downloads/


• Apple MacOSXUpd10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/


• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X ImageIO TIFF Images Remote Buffer Overflow Vulnerability

References:

• Apple Downloads (Apple)
  
• Apple Security Updates (Apple)
  
• Mac OS X Homepage (Apple)