CVE-2006-1471

no score yetEPSS 0.4%

Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-134
Published: 2006-06-27
Modified: 2026-09-23
Record from: the NVD, synced 2026-10-19

Affected

apple:mac_os_x
apple:mac_os_x_server

References

http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html
http://secunia.com/advisories/20877
http://securitytracker.com/id?1016397
http://www.osvdb.org/26933
http://www.securityfocus.com/archive/1/438699/100/0/threaded

Check your stack JSON