Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) afp, (2) cifs, or (3) smb URL.
2010-06-17T16:30:01.607
2025-04-11T00:51:21.963
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | apple | mac_os_x | 10.6.0 | Yes |
Operating System | apple | mac_os_x | 10.6.1 | Yes |
Operating System | apple | mac_os_x | 10.6.2 | Yes |
Operating System | apple | mac_os_x | 10.6.3 | Yes |
Operating System | apple | mac_os_x_server | 10.6.0 | Yes |
Operating System | apple | mac_os_x_server | 10.6.1 | Yes |
Operating System | apple | mac_os_x_server | 10.6.2 | Yes |
Operating System | apple | mac_os_x_server | 10.6.3 | Yes |