CVE-2006-1552 Integer overflow in n/a

Medium 5.0 Published 31 Mar 2006 Updated 7 Aug 2024

Remote attackers can crash Mac OS X via a crafted JPEG image processed by ImageIO, requiring user interaction to view the image.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2006-1552?

CVE-2006-1552 is a medium-severity vulnerability in Apple Mac Os X, published on 31 Mar 2006. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".

Weakness: CWE-189

Which versions are affected by CVE-2006-1552?

It affects 4 products.

Products include Apple Imageio, Apple Mac Os X, Apple Mac Os X Server, Apple Safari.

How do I fix CVE-2006-1552?

No fix has been published for CVE-2006-1552 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-1552 being exploited?

There is no known exploitation of CVE-2006-1552 in the wild and no public exploit code.

All Apple Mac Os X vulnerabilities

Sources

Also known as GHSA-7vrq-whhp-9gg3.