CVE-2006-1220

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-14 · updated 2026-06-16

Description

Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown attack vectors related to a large message header size, which leads to a heap-based buffer overflow.

Affected products

macOS: 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1 (+30)
Apple Mac Os X Server: 10.0, 10.1, 10.1.1, 10.1.2, 10.1.3, 10.1.4 (+26)

References

http://www.felinemenace.org/~nemo/
http://www.osvdb.org/28453
http://www.securityfocus.com/bid/17056
http://www.felinemenace.org/~nemo/
http://www.osvdb.org/28453
http://www.securityfocus.com/bid/17056

Get alerted when CVE-2006-1220 or the next vulnerability affects your stack