CVE-2006-4866 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 1% (pctl 61)
Patch early
A public exploit exists.
Description
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 0.98% — more likely to be exploited than 61% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-09-19 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| apple | mac os x |
| apple | mac os x server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Apple Mac OSX 10.x - KExtLoad Buffer Overflow | 2006-09-14 |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html
- http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt
- http://www.securityfocus.com/bid/20034
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html
- http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt
- http://www.securityfocus.com/bid/20034
→ the Explorer · watch your stack · NVD