CVE-2006-4391

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.htmlPatch
http://secunia.com/advisories/22187Patch, Vendor Advisory
http://securitytracker.com/id?1016953Patch
http://www.kb.cert.org/vuls/id/546772US Government Resource
http://www.osvdb.org/29268
http://www.securityfocus.com/bid/20271Patch
http://www.us-cert.gov/cas/techalerts/TA06-275A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2006/3852
https://exchange.xforce.ibmcloud.com/vulnerabilities/29280
http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.htmlPatch
http://secunia.com/advisories/22187Patch, Vendor Advisory
http://securitytracker.com/id?1016953Patch
http://www.kb.cert.org/vuls/id/546772US Government Resource
http://www.osvdb.org/29268
http://www.securityfocus.com/bid/20271Patch
http://www.us-cert.gov/cas/techalerts/TA06-275A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2006/3852
https://exchange.xforce.ibmcloud.com/vulnerabilities/29280

Timeline

Published: Oct 3, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-43927.2The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to CVE-2006-43933.7Unspecified vulnerability in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, when Fast User Switching is enabled, allows local users to g CVE-2006-43947.5A logic error in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, allows network accounts without GUIds to bypass service access controls CVE-2006-43955.1Unspecified vulnerability in QuickDraw Manager in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows context-dependent attackers to cause CVE-2006-43964.6The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create a CVE-2006-43974.6Unchecked error condition in LoginWindow in Apple Mac OS X 10.4 through 10.4.7 prevents Kerberos tickets from being destroyed if a user does CVE-2006-43987.2Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 through 10.4.8 allow local users to execute arbitrary cod CVE-2006-43992.1User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authen CVE-2006-44005.1Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and earlier allow user-assisted attackers to execute ar CVE-2006-44015.1Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary FTP commands CVE-2006-44025.1Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary cod CVE-2006-44034.0The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will crash when a login failure occurs with a valid user na