CVE-2006-6353

Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (application crash) via unspecified vectors related to (1) certain KERN_PROTECTION_FAILURE thread crashes and (2) certain KERN_INVALID_ADDRESS thread crashes, as discovered with the "iSec Partners FileP fuzzer".

• http://security-protocols.com/2006/12/04/bomarchivehelper-needs-some-lovin/Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/21446Vendor Advisory
• http://security-protocols.com/2006/12/04/bomarchivehelper-needs-some-lovin/Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/21446Vendor Advisory

Published

Dec 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6347Unrestricted file upload vulnerability in TFT-Gallery allows…
• CVE-2006-6348Cross-site scripting (XSS) vulnerability in board.php in mow…
• CVE-2006-6349Multiple SQL injection vulnerabilities in PWP Technologies T…
• CVE-2006-6350listpics 5 stores sensitive data under the web root with ins…
• CVE-2006-6351KhaledMuratList stores sensitive data under the web root wit…
• CVE-2006-6352FRISK Software F-Prot Antivirus before 4.6.7 allows user-ass…
• CVE-2006-6354Multiple SQL injection vulnerabilities in detail.asp in DuWa…
• CVE-2006-6355SQL injection vulnerability in default.asp in DuWare DuClass…
• CVE-2006-6356Multiple cross-site scripting (XSS) vulnerabilities in templ…
• CVE-2006-6357Cross-site scripting (XSS) vulnerability in templates/cat_te…
• CVE-2006-6358SQL injection vulnerability in the login function in auth.in…
• CVE-2006-6359Cross-site scripting (XSS) vulnerability in Stefan Frech onl…