CVE-2006-1552

Description

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka Deja-Doom.

Risk Information

Base Score
5.5
MODERATE
Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
3.822

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Apple Safari 2.0Windows
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.2.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.2.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.2.3Mac
Vulnerabilities CVE-2004-1314,CVE-2006-1552 are affected in Apple Safari for MAC beta2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0.2Mac
Vulnerabilities CVE-2006-1552,CVE-2008-3623 are affected in Apple Safari for MAC 2.0_preMac
Multiple Vulnerabilities are affected in Apple Safari 1.2Mac
Multiple Vulnerabilities are affected in Apple Safari 1.3Mac
Multiple Vulnerabilities are affected in Apple Safari 2.0Mac
Multiple Vulnerabilities are affected in Apple Safari 2.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari 1.2.1Mac
Multiple Vulnerabilities are affected in Apple Safari 1.2.2Mac
Multiple Vulnerabilities are affected in Apple Safari 1.2.3Mac
Multiple Vulnerabilities are affected in Apple Safari 2.0_preMac
Multiple Vulnerabilities are affected in Apple Safari 2.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC beta2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0_preMac
Vulnerabilities CVE-2006-1552,CVE-2008-3623,CVE-2009-2804 are affected in Apple Safari for MAC 2.0_preMac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-612606Apple Safari for MAC (MacOS Sequoia) (26.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234