CVE-2006-5710

The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow.

• CWE-119

• http://docs.info.apple.com/article.html?artnum=304829
• http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
• http://projects.info-pull.com/mokb/MOKB-01-11-2006.htmlExploit
• http://secunia.com/advisories/22679Exploit, Vendor Advisory
• http://secunia.com/advisories/23155
• http://securitytracker.com/id?1017151
• http://www.kb.cert.org/vuls/id/191336US Government Resource
• http://www.osvdb.org/30180
• http://www.securityfocus.com/bid/20862Exploit
• http://www.us-cert.gov/cas/techalerts/TA06-333A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/4313Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4750Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29965
• http://docs.info.apple.com/article.html?artnum=304829
• http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
• http://projects.info-pull.com/mokb/MOKB-01-11-2006.htmlExploit
• http://secunia.com/advisories/22679Exploit, Vendor Advisory
• http://secunia.com/advisories/23155
• http://securitytracker.com/id?1017151
• http://www.kb.cert.org/vuls/id/191336US Government Resource
• http://www.osvdb.org/30180
• http://www.securityfocus.com/bid/20862Exploit
• http://www.us-cert.gov/cas/techalerts/TA06-333A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/4313Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4750Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29965

Published

Nov 4, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5704HP NonStop Server G06.29, when running Standard Security T65…
• CVE-2006-5705Multiple directory traversal vulnerabilities in plugins/wp-d…
• CVE-2006-5706Unspecified vulnerabilities in PHP, probably before 5.2.0, a…
• CVE-2006-5707SQL injection vulnerability in index.php in PHPEasyData Pro …
• CVE-2006-5708Multiple unspecified vulnerabilities in MDaemon and WorldCli…7.5
• CVE-2006-5709Unspecified vulnerability in WorldClient in Alt-N Technologi…
• CVE-2006-5711ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows …
• CVE-2006-5712Cross-site scripting (XSS) vulnerability in Mirapoint WebMai…
• CVE-2006-5713Cross-site scripting (XSS) vulnerability in Easy File Sharin…
• CVE-2006-5714Easy File Sharing (EFS) Web Server 4.0, when running on an N…
• CVE-2006-5715Easy File Sharing (EFS) Easy Address Book 1.2, when run on a…
• CVE-2006-5716Directory traversal vulnerability in aff_news.php in FreeNew…