Lucene search

MitreCVE-2007-4269

HistoryNov 15, 2007 - 1:46 a.m.

CVE-2007-4269

2007-11-1501:46:00

CWE-189

mitre

web.nvd.nist.gov

apple mac

os x

integer overflow

networking component

arbitrary code execution

appletalk

asp

buffer overflow

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

Percentile

5.3%

JSON

Integer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk Session Protocol (ASP) message on an AppleTalk socket, which triggers a heap-based buffer overflow.

Affected configurations

Nvd

Node

applemac_os_xMatch10.4

applemac_os_xMatch10.4.1

applemac_os_xMatch10.4.2

applemac_os_xMatch10.4.3

applemac_os_xMatch10.4.4

applemac_os_xMatch10.4.5

applemac_os_xMatch10.4.6

applemac_os_xMatch10.4.7

applemac_os_xMatch10.4.8

applemac_os_xMatch10.4.9

applemac_os_xMatch10.4.10

applemac_os_x_serverMatch10.4

applemac_os_x_serverMatch10.4.0

applemac_os_x_serverMatch10.4.1

applemac_os_x_serverMatch10.4.2

applemac_os_x_serverMatch10.4.3

applemac_os_x_serverMatch10.4.4

applemac_os_x_serverMatch10.4.5

applemac_os_x_serverMatch10.4.6

applemac_os_x_serverMatch10.4.7

applemac_os_x_serverMatch10.4.8

applemac_os_x_serverMatch10.4.9

applemac_os_x_serverMatch10.4.10

VendorProductVersionCPE
applemac_os_x10.4cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
applemac_os_x10.4.1cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
applemac_os_x10.4.2cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
applemac_os_x10.4.3cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
applemac_os_x10.4.4cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
applemac_os_x10.4.5cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
applemac_os_x10.4.6cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
applemac_os_x10.4.7cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*
applemac_os_x10.4.8cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
applemac_os_x10.4.9cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.4	cpe:2.3:o:apple:mac_os_x:10.4:::::::*
apple	mac_os_x	10.4.1	cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
apple	mac_os_x	10.4.2	cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
apple	mac_os_x	10.4.3	cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
apple	mac_os_x	10.4.4	cpe:2.3:o:apple:mac_os_x:10.4.4:::::::*
apple	mac_os_x	10.4.5	cpe:2.3:o:apple:mac_os_x:10.4.5:::::::*
apple	mac_os_x	10.4.6	cpe:2.3:o:apple:mac_os_x:10.4.6:::::::*
apple	mac_os_x	10.4.7	cpe:2.3:o:apple:mac_os_x:10.4.7:::::::*
apple	mac_os_x	10.4.8	cpe:2.3:o:apple:mac_os_x:10.4.8:::::::*
apple	mac_os_x	10.4.9	cpe:2.3:o:apple:mac_os_x:10.4.9:::::::*

Rows per page:

1-10 of 231

References

docs.info.apple.com/article.html?artnum=307041

labs.idefense.com/intelligence/vulnerabilities/display.php?id=629

lists.apple.com/archives/security-announce/2007/Nov/msg00002.html

secunia.com/advisories/27643

securitytracker.com/id?1018950

www.securityfocus.com/bid/26444

www.us-cert.gov/cas/techalerts/TA07-319A.html

www.vupen.com/english/advisories/2007/3868

exchange.xforce.ibmcloud.com/vulnerabilities/38473

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

Percentile

5.3%

JSON

Related for CVE-2007-4269