National Cyber-Alert System

Vulnerability Summary for CVE-2006-5710

Overview

The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Solution

Failed exploit attempts will likely result in denial-of-service conditions.}

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA06-333A

Name: TA06-333A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-333A.html

US-CERT Vulnerability Note: VU#191336

Name: VU#191336

Hyperlink:http://www.kb.cert.org/vuls/id/191336

External Source: XF

Name: airport-driver-code-execution(29965)

Hyperlink:http://xforce.iss.net/xforce/xfdb/29965

External Source: BID

Name: 20862

Hyperlink:http://www.securityfocus.com/bid/20862

External Source: VUPEN

Name: ADV-2006-4750

Hyperlink:http://www.frsirt.com/english/advisories/2006/4750

External Source: VUPEN

Name: ADV-2006-4313

Hyperlink:http://www.frsirt.com/english/advisories/2006/4313

External Source: SECTRACK

Name: 1017151

Hyperlink:http://securitytracker.com/id?1017151

External Source: SECUNIA

Name: 23155

Hyperlink:http://secunia.com/advisories/23155

External Source: SECUNIA

Name: 22679

Type: Advisory

Hyperlink:http://secunia.com/advisories/22679

External Source: MISC

Name: http://projects.info-pull.com/mokb/MOKB-01-11-2006.html

Hyperlink:http://projects.info-pull.com/mokb/MOKB-01-11-2006.html

External Source: APPLE

Name: APPLE-SA-2006-11-28

Hyperlink:http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=304829

Hyperlink:http://docs.info.apple.com/article.html?artnum=304829

External Source: OSVDB

Name: 30180

Hyperlink:http://www.osvdb.org/30180