CVE-2006-1985

MEDIUM · CVSS 5.1 EPSS 13.91%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-04-21 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2006-1985

Severity

MEDIUM

CVSS

5.1

EPSS

13.91%

Original Filing — NVD Description

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.