CVEs-PoC/2006/CVE-2006-1985.md

CVE-2006-1985

Description

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.

POC

Reference

• http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233
• http://www.security-protocols.com/sp-x25-advisory.php

Github

No PoCs found on GitHub currently.