Integer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk Session Protocol (ASP) message on an AppleTalk socket, which triggers a heap-based buffer overflow.
| Software | From | Fixed in |
|---|---|---|
| apple / mac_os_x | 10.4.3 | 10.4.3.x |
| apple / mac_os_x_server | 10.4.3 | 10.4.3.x |
| apple / mac_os_x_server | 10.4.10 | 10.4.10.x |
| apple / mac_os_x_server | 10.4.9 | 10.4.9.x |
| apple / mac_os_x | 10.4.1 | 10.4.1.x |
| apple / mac_os_x_server | 10.4.2 | 10.4.2.x |
| apple / mac_os_x_server | 10.4.4 | 10.4.4.x |
| apple / mac_os_x | 10.4.10 | 10.4.10.x |
| apple / mac_os_x_server | 10.4.1 | 10.4.1.x |
| apple / mac_os_x | 10.4.9 | 10.4.9.x |
| apple / mac_os_x_server | 10.4.0 | 10.4.0.x |
| apple / mac_os_x | 10.4.7 | 10.4.7.x |
| apple / mac_os_x | 10.4.4 | 10.4.4.x |
| apple / mac_os_x_server | 10.4 | 10.4.x |
| apple / mac_os_x_server | 10.4.5 | 10.4.5.x |
| apple / mac_os_x | 10.4 | 10.4.x |
| apple / mac_os_x_server | 10.4.6 | 10.4.6.x |
| apple / mac_os_x_server | 10.4.8 | 10.4.8.x |
| apple / mac_os_x | 10.4.6 | 10.4.6.x |
| apple / mac_os_x | 10.4.5 | 10.4.5.x |
| apple / mac_os_x | 10.4.8 | 10.4.8.x |
| apple / mac_os_x_server | 10.4.7 | 10.4.7.x |
| apple / mac_os_x | 10.4.2 | 10.4.2.x |