Lucene search
HistoryAug 03, 2007 - 10:17 a.m.
CVE-2007-3747
cve-2007-3747
apple
mac os x
coreaudio
java
remote code execution
security vulnerability
7.5 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.034 Low
EPSS
Percentile
91.3%
The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute arbitrary code via a crafted applet.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:ichat | apple ichat | eq | * |
References
Related
prion
prion
Design/Logic Flaw
2007-08-03 10:17:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2007-007)
2007-08-02 00:00:00
seebug
seebug
Mac OS X 2007-007更新修复多个安全漏洞
2007-08-02 00:00:00
7.5 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.034 Low
EPSS
Percentile
91.3%
Related for CVE-2007-3747