vulnwire
7.2high

CVE-2006-3500

The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 35%
Public exploits
0
none known

The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability.

Exploit prediction (EPSS)

0.41% probability of exploitation in the next 30 days, higher than 35% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • lists.apple.com /archives/security-announce/2006//Aug/msg00000.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • vupen.com /english/advisories/2006/3101 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/21253 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/28141 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/19289 · vdb-entry, x_refsource_BID, x_transferred
  • us-cert.gov /cas/techalerts/TA06-214A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • osvdb.org /27738 · vdb-entry, x_refsource_OSVDB, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.