CVE-2007-4679

CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands...

CVE-2007-4678

AppleRAID in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows attackers to cause a denial of service crash via a crafted striped disk image, which triggers a NULL pointer dereference when it is mounted...

CVE-2007-4679

CVE-2007-4679 affects Apple Mac OS X 10.4–10.4.10 via CFNetwork’s FTP implementation. Remote FTP servers can craft PASV responses to cause the client to connect to an attacker‑controlled host. Impact: partial integrity, no confidentiality or availability impact stated; exploit requires network ac...

CVE-2007-4681

CVE-2007-4681 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.10. The problem is a one‑byte overflow in CoreFoundation when listing directory contents, which can cause an application crash and may allow arbitrary code execution on a local basis if a user is tricked into reading a crafted direct...

CVE-2007-4685

CVE-2007-4685 affects Apple Mac OS X 10.4–10.4.10. Local users can gain privileges by executing setuid/setgid programs whose stdio/stderr/stdout descriptors are in an unexpected state. The issue is mitigated by upgrading to Mac OS X 10.4.11 (Security Update 2007-008) as released by Apple; patch d...

CVE-2007-4268

CVE-2007-4268 affects Apple Mac OS X 10.4–10.4.10 (Mac OS X Server 10.4–10.4.10) and involves an Integer signedness error in the Networking/AppleTalk mbuf allocation path. A crafted AppleTalk message containing a negative value satisfies a signed comparison during mbuf allocation but is later int...

CVE-2007-4697

CVE-2007-4697 refers to an unspecified vulnerability in Apple WebCore for Mac OS X 10.4–10.4.10, where remote attackers could trigger memory corruption via the browser history, causing the application to terminate or allowing arbitrary code execution. Connected sources corroborate the Mac OS X 10...

CVE-2007-4689

CVE-2007-4689 is a double-free vulnerability in the Networking component of Apple Mac OS X 10.4 up to 10.4.10 . The issue affects how IPv6 packets are processed, potentially allowing remote attackers to cause a denial of service (system shutdown) or execute arbitrary code. The affected product ra...

CVE-2007-4690

CVE-2007-4690 is a double-free vulnerability in the NFS component of Apple Mac OS X 10.4–10.4.10. The underlying issue occurs when processing AUTH_UNIX RPC calls, allowing remote authenticated users to execute arbitrary code. Affected software: Apple Mac OS X (and Mac OS X Server) up to 10.4.10. ...

CVE-2007-4684

CVE-2007-4684 is a local kernel vulnerability in Apple Mac OS X 10.4–10.4.10 where the i386_set_ldt system call can overflow a single byte in num_sels, enabling local arbitrary code execution. Exploitation was demonstrated on Mac OS X 10.4.11-era builds via a local access path; references note an...

CVE-2007-4678

CVE-2007-4678 affects Apple Mac OS X 10.3.9 and 10.4 through 10.4.10. The issue is in AppleRAID when loading a stripped disk image, where mounting can trigger a NULL pointer dereference, causing a denial of service (crash). No exploitation details are provided in the documents beyond this descrip...

CVE-2007-3749

CVE-2007-3749 affects Apple Mac OS X 10.4–10.4.10. The kernel fails to reset the current Mach Thread Port or Thread Exception Port when executing a setuid binary, permitting a local attacker to write into the memory of a root process by pre-creating a Mach port and then launching the setuid progr...

CVE-2007-4683

Apple Mac OS X 10.4.x kernels are affected by CVE-2007-4683, a local directory traversal vulnerability in the kernel that allows a local user to bypass chroot restrictions by using a relative path when changing the current working directory. The issue affects Mac OS X 10.4 through 10.4.10; impact...

CVE-2007-4696

CVE-2007-4696 is a race-condition vulnerability in WebCore/Safari on Apple Mac OS X 10.4–10.4.10. The flaw occurs during page transitions in Safari, allowing remote attackers to obtain information entered into forms on other sites. The affected component is Safari/WebKit’s handling of page transi...

CVE-2007-4682

The CVE-2007-4682 issue affects Apple Mac OS X 10.4 through 10.4.10, where CoreText faulty handling of text content can trigger an uninitialized object pointer, causing an application crash or potentially arbitrary code execution. Evidence from multiple sources describes CoreText as the vulnerabl...

CVE-2007-4267

Apple Mac OS X 10.4–10.4.10 (and Mac OS X Server 10.4–10.4.10) contain a stack-based kernel overflow in the AppleTalk networking path. The vulnerability arises when an IOCTL adds an AppleTalk zone to a routing table, allowing a local attacker to cause arbitrary code execution with kernel privileg...

CVE-2007-4688

CVE-2007-4688 affects Apple Mac OS X 10.4–10.4.10. A vulnerability in the Networking component's Node Information Query allows remote attackers to obtain all host addresses, including link-local addresses, exposing information about the host. The issue is an information-disclosure flaw in the Nod...

CVE-2007-4680

CVE-2007-4680 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.10. The flaw is in CFNetwork certificate validation, enabling a remote attacker to perform a man‑in‑the‑middle attack to spoof trusted SSL certificates and potentially leak credentials or other information. The issue is mitigated by ...

CVE-2007-4694

CVE-2007-4694 affects Apple Mac OS X 10.4–10.4.10. Safari can disclose local files when loading resources from file:// URLs if a user visits a malicious site; the underlying issue is Safari loading resources without blocking file:// URLs. The Seebug entry corroborates this vulnerability as part o...

CVE-2007-4687

Apple Mac OS X 10.4–10.4.10 contains a symbolic link from /private/tftpboot to the root directory, allowing tftpd users to escape the private directory and access arbitrary files. The issue affects the remote_cmds component and was documented across multiple sources (CVE-2007-4687). Exploitation ...