CVE-2006-3500

The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2006-08-03

Last modified

2024-08-07

Affected products

• Mac Os X (Apple)
• Mac Os X Server (Apple)

References

• http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
• http://secunia.com/advisories/21253
• http://www.osvdb.org/27738
• http://www.securityfocus.com/bid/19289
• http://www.us-cert.gov/cas/techalerts/TA06-214A.html
• http://www.vupen.com/english/advisories/2006/3101
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28141