Lucene search

[email protected]CVE-2007-4267

HistoryNov 15, 2007 - 1:46 a.m.

CVE-2007-4267

2007-11-1501:46:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-4267

stack-based buffer overflow

networking component

apple

mac os x

local users

arbitrary code

crafted ioctl request

appletalk zone

routing table

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.3%

JSON

Stack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted IOCTL request that adds an AppleTalk zone to a routing table.

Affected configurations

NVD

Node

applemac_os_xMatch10.4

applemac_os_xMatch10.4.1

applemac_os_xMatch10.4.2

applemac_os_xMatch10.4.3

applemac_os_xMatch10.4.4

applemac_os_xMatch10.4.5

applemac_os_xMatch10.4.6

applemac_os_xMatch10.4.7

applemac_os_xMatch10.4.8

applemac_os_xMatch10.4.9

applemac_os_xMatch10.4.10

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4
apple:mac_os_xapple mac os xeq10.4.1
apple:mac_os_xapple mac os xeq10.4.2
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_xapple mac os xeq10.4.4
apple:mac_os_xapple mac os xeq10.4.5
apple:mac_os_xapple mac os xeq10.4.6
apple:mac_os_xapple mac os xeq10.4.7
apple:mac_os_xapple mac os xeq10.4.8
apple:mac_os_xapple mac os xeq10.4.9

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4
apple:mac_os_x	apple mac os x	eq	10.4.1
apple:mac_os_x	apple mac os x	eq	10.4.2
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x	apple mac os x	eq	10.4.4
apple:mac_os_x	apple mac os x	eq	10.4.5
apple:mac_os_x	apple mac os x	eq	10.4.6
apple:mac_os_x	apple mac os x	eq	10.4.7
apple:mac_os_x	apple mac os x	eq	10.4.8
apple:mac_os_x	apple mac os x	eq	10.4.9