CVE-2006-1443: Apple Mac OS X

Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions.

Affected products

• Apple Mac OS X: version 10.3.9 only; version 10.4.6 only

Published 2006-05-12. Last modified 2026-06-16.