Vulnerability Description
Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (application crash) via unspecified vectors related to (1) certain KERN_PROTECTION_FAILURE thread crashes and (2) certain KERN_INVALID_ADDRESS thread crashes, as discovered with the "iSec Partners FileP fuzzer".
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Bomarchivehelper | All versions |
| Apple | Mac Os X | 10.4.8 |
| Apple | Mac Os X Server | 10.4.8 |
References
- http://security-protocols.com/2006/12/04/bomarchivehelper-needs-some-lovin/ExploitVendor Advisory
- http://www.securityfocus.com/bid/21446Vendor Advisory
- http://security-protocols.com/2006/12/04/bomarchivehelper-needs-some-lovin/ExploitVendor Advisory
- http://www.securityfocus.com/bid/21446Vendor Advisory
FAQ
What is CVE-2006-6353?
CVE-2006-6353 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (application crash) via unspecified vectors related to (1) certai...
How severe is CVE-2006-6353?
CVE-2006-6353 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-6353?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Bomarchivehelper, Apple Mac Os X, Apple Mac Os X Server.