----------------------------------------------------------------------



Accurate Vulnerability Scanning
No more false positives, no more false negatives

http://secunia.com/vulnerability_scanning/



----------------------------------------------------------------------

TITLE:
Apple Mac OS X "strtod()" Floating Point Parsing Memory Corruption

SECUNIA ADVISORY ID:
SA38066

VERIFY ADVISORY:
http://secunia.com/advisories/38066/

DESCRIPTION:
A vulnerability has been discovered in Mac OS X, which can be
exploited by malicious people to potentially compromise a vulnerable
system.

The vulnerability is caused due to an error in libc when processing
floating point numbers passed to the "strtod()" function. This can be
exploited to corrupt memory when an application passes a specially
crafted floating point number to the "strtod()" function or another
function calling it (e.g. the "atof()" function).

The vulnerability is confirmed in Mac OS X 10.5.8 and reported in Mac
OS X 10.6.

NOTE: Currently, there is no application known that can be used as
attack vector.

SOLUTION:
There is no effective solution.

PROVIDED AND/OR DISCOVERED BY:
Maksymilian Arciemowicz and sp3x

ORIGINAL ADVISORY:
http://securityreason.com/achievement_securityalert/81

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------