About the security content of the Mac OS X 10.4.8 Update and Security Update 2006-006 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2006-4640Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors
• CVE-2006-4394n/a: security vulnerability
• CVE-2006-4392n/a: security vulnerability
• CVE-2006-4393Unspecified vulnerability in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, when Fast User Switching is enabled, allows local users to gain access to Kerberos tickets of other users
• CVE-2006-4397n/a: security vulnerability
• CVE-2006-4399n/a: security vulnerability
• CVE-2006-4391Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image
• CVE-2006-4387n/a: security vulnerability
• CVE-2006-4390n/a: security vulnerability
• CVE-2006-4395n/a: security vulnerability
• CVE-2006-3946n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2006-3587n/a: security vulnerability
• CVE-2006-3588n/a: security vulnerability
• CVE-2006-3311n/a: security vulnerability
• CVE-2006-1721n/a: Improper Input Validation

Source and provenance

Original title: About the security content of the Mac OS X 10.4.8 Update and Security Update 2006-006 - Apple Support. Captured 18 Oct 2026, 08:07 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.