PT-2007-2191 · Apple · Macos X

Greg Bolsinga · Publicado 2007-05-24 · Atualizado 2017-07-29 · CVE-2007-0740

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.9

Description The issue concerns the Alias Manager in Apple Mac OS X, which fails to display files with the same name in mounted disk images that have the same name. This could potentially allow attackers to trick users into executing malicious files.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.9, consider avoiding the use of disk images with the same name to minimize the risk of exploitation. As a temporary workaround, users should exercise caution when executing files from mounted disk images. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-0740

Produtos afetados

Macos X

Referências · 9

• http://securitytracker.com/id?1018121 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0740 · Nota de Segurança
• http://docs.info.apple.com/article.html?artnum=305530 · Nota
• http://secunia.com/advisories/25402 · Nota
• http://osvdb.org/35147 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34498 · Nota
• http://lists.apple.com/archives/security-announce/2007/May/msg00004.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1939 · Nota
• http://securityfocus.com/bid/24144 · Nota