Secunia.com

QUOTE
Critical: Highly critical
Impact: Privilege escalation
DoS
System access
Where: From remote
Solution Status: Unpatched

OS: Apple Macintosh OS X


CVE reference: CVE-2006-6061 (Secunia mirror)
CVE-2006-6062 (Secunia mirror)

This advisory is currently marked as unpatched!
- Companies can be alerted when a patch is released!


Description:
LMH has reported a vulnerability in Mac OS X, which potentially can be exploited by malicious, local users to gain escalated privileges or by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in com.apple.AppleDiskImageController when handling corrupted DMG image structures. This can be exploited to cause a memory corruption and may allow execution of arbitrary code in kernel-mode.

The vulnerability is reported in a fully patched Mac OS X (2006-11-20). Other versions may also be affected.