PT-2007-2177 · Apple · Macos X+1

Publicado 2007-04-24 · Atualizado 2011-03-08 · CVE-2007-0725

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.9

Description A buffer overflow issue exists in the AirPortDriver module for AirPort, allowing local users to execute arbitrary code by sending malformed control commands when running on hardware with the original AirPort wireless card.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.9, consider disabling the AirPortDriver module as a temporary workaround until a patch is available. Restrict access to the AirPort wireless card to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-0725

Produtos afetados

Airport

Macos X

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-0725 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Nota
• http://secunia.com/advisories/24966 · Nota
• http://securityfocus.com/bid/23569 · Nota
• http://vupen.com/english/advisories/2007/1470 · Nota
• http://osvdb.org/34857 · Nota
• http://docs.info.apple.com/article.html?artnum=305391 · Nota
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Aviso do Fabricante