PatchTheCVECVE-2006-5710: The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, an
CVE-2006-5710 is a high-severity flaw (CVSS 7.5) affecting mac os x, darwin kernel. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow.
Why this priority
- High severity
- EPSS top 3%: very likely to be exploited
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.5 (High) |
| EPSS exploit chance | 19.6% (top 3%) |
| CISA exploited list | No |
| Weakness | CWE-119 |
| Published | 2006-11-04 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2006-5710?
mac os x: mitigate or apply the listed mitigation; darwin kernel: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2006-5710 being exploited?
CVE-2006-5710 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2006-5710 affect?
CVE-2006-5710 affects mac os x, darwin kernel. Severity is high (CVSS 7.5). The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid
How urgent is CVE-2006-5710?
Priority 56/100. High severity; EPSS top 3%: very likely to be exploited; Public exploit reference
Related CVEs
- CVE-2021-4187 HIGH 7.8 UPGRADE MITIGATE vim is vulnerable to Use After Free
- CVE-2021-4173 HIGH 7.8 UPGRADE MITIGATE vim is vulnerable to Use After Free
- CVE-2022-23308 HIGH 7.5 UPGRADE MITIGATE valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
- CVE-2020-36230 HIGH 7.5 UPGRADE MITIGATE A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsi
- CVE-2020-36229 HIGH 7.5 UPGRADE MITIGATE A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN par