Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) afp, (2) cifs, or (3) smb URL.
| Software | From | Fixed in |
|---|---|---|
| apple / mac_os_x | 10.6.0 | 10.6.0.x |
| apple / mac_os_x | 10.6.1 | 10.6.1.x |
| apple / mac_os_x | 10.6.2 | 10.6.2.x |
| apple / mac_os_x | 10.6.3 | 10.6.3.x |
| apple / mac_os_x_server | 10.6.0 | 10.6.0.x |
| apple / mac_os_x_server | 10.6.1 | 10.6.1.x |
| apple / mac_os_x_server | 10.6.2 | 10.6.2.x |
| apple / mac_os_x_server | 10.6.3 | 10.6.3.x |