Apple Mail buffer overflow vulnerability

Overview

Apple Mail contains a buffer overflow that may allow a remote attacker to execute arbitrary code on a vulnerable system.

Description

Apple Mail

Mac OS X includes the Mail application (Mail.app) for handling electronic mail.

The Problem

Apple Mail contains a buffer overflow caused by lack of validation on MIME encapsulted files. The buffer overflow may be triggered when an email message with a specially crafted attachment is opened with Mail.

Considerations

According to public reports this vulnerability is introduced by Apple Security Update 2006-001.

Exploit code for this vulnerability is publicly available.

---

Impact

By convincing a user to open a specially crafted attachment, a remote, unauthenticated attacker may be able to execute arbitrary code with the privileges of the user running Mail.

---

Solution

Install an update****
This issue is corrected in Apple Security Update 2006-002.

---

Do not open attachments from untrusted sources

To protect against Only open email attachemnts from trusted or known sources.

---

Vendor Information

980084

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Apple Computer, Inc. __ Affected

Updated: March 15, 2006

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

Please see <http://docs.info.apple.com/article.html?artnum=303453&gt;.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23980084 Feedback>).

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <http://www.digitalmunition.com/DMA[2006-0313a].txt&gt;
• <http://docs.info.apple.com/article.html?artnum=303453&gt;
• <http://secunia.com/advisories/19129/&gt;

Acknowledgements

This vulnerability was reported by Kevin Finisterre.

This document was written by Jeff Gennari.

Other Information

CVE IDs:	CVE-2006-0396
Severity Metric:	6.63 Date Public: