Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".
2006-03-31T11:06:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | apple | safari | 1.0 | Yes |
Application | apple | safari | 1.1 | Yes |
Application | apple | safari | 1.2 | Yes |
Application | apple | safari | 1.2.1 | Yes |
Application | apple | safari | 1.2.2 | Yes |
Application | apple | safari | 1.2.3 | Yes |
Application | apple | safari | 1.3 | Yes |
Application | apple | safari | 2.0 | Yes |
Application | apple | safari | 2.0.1 | Yes |
Application | apple | safari | 2.0.2 | Yes |
Application | apple | safari | 2.0_pre | Yes |
Application | apple | safari | beta2 | Yes |
Application | apple | imageio | * | Yes |
Operating System | apple | mac_os_x | 10.4 | Yes |
Operating System | apple | mac_os_x | 10.4.1 | Yes |
Operating System | apple | mac_os_x | 10.4.2 | Yes |
Operating System | apple | mac_os_x | 10.4.3 | Yes |
Operating System | apple | mac_os_x | 10.4.4 | Yes |
Operating System | apple | mac_os_x | 10.4.5 | Yes |
Operating System | apple | mac_os_x_server | 10.4 | Yes |
Operating System | apple | mac_os_x_server | 10.4.1 | Yes |
Operating System | apple | mac_os_x_server | 10.4.2 | Yes |
Operating System | apple | mac_os_x_server | 10.4.3 | Yes |
Operating System | apple | mac_os_x_server | 10.4.4 | Yes |
Operating System | apple | mac_os_x_server | 10.4.5 | Yes |