Overview
Apple Mac OS X fails to properly handle corrupted DMG image structures. The complete impact of this vulnerability is unclear, but may include execution of arbitrary code or denial of service.
Description
A vulnerability in the way Mac OS X com.apple.AppleDiskImageController handles malformed DMG files could lead to a memory corruption. We are aware of publicly available proof-of-concept code that demonstrates this vulnerability. |
Impact
The complete impact of this vulnerability is unclear, but may include execution of arbitrary code or denial of service. |
Solution
Upgrade |
Disable Open “safe” files after downloading option |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
- http://projects.info-pull.com/mokb/MOKB-20-11-2006.html
- http://secunia.com/advisories/23012/
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6061
- http://docs.info.apple.com/article.html?artnum=305214
- http://secunia.com/advisories/24479/
- http://securitytracker.com/alerts/2007/Mar/1017751.html
- http://www.securityfocus.com/bid/21201
Acknowledgements
This issue was reported in Month of Kernel Bugs MOKB-20-11-2006 by LMH.
This document was written by Chris Taschner.
Other Information
| CVE IDs: | CVE-2006-6061 |
| Severity Metric: | 15.99 |
| Date Public: | 2006-11-20 |
| Date First Published: | 2006-11-22 |
| Date Last Updated: | 2007-03-20 13:57 UTC |
| Document Revision: | 33 |