CVE-2006-1983 describes multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier, impacting applications utilizing ImageIO or AppKit when processing TIFF or GIF images. This vulnerability carries a CVSS score of 6.4, indicating a medium severity risk, as it allows remote attackers to cause a denial of service and potentially execute arbitrary code with low attack complexity and no authentication required. Despite its potential impact, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed in CISA's KEV catalog, suggesting it is not actively exploited. Community discussion and media coverage are also minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.3CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:* | ||
10.3.1CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:* | ||
10.3.2CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:* | ||
10.3.3CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:* | ||
10.3.4CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.