PT-2007-2192 · Apple · Macos X

Publicado 2007-04-24 · Atualizado 2011-03-08 · CVE-2007-0741

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.9

Description The issue is related to a buffer overflow in the natd component of network cmds. This occurs when Internet Sharing is enabled and the system receives malformed RTSP packets, allowing remote attackers to execute arbitrary code.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.9, consider disabling Internet Sharing until a patch is available to prevent exploitation of the buffer overflow vulnerability in natd.

Correção

Identificadores relacionados

CVE-2007-0741

Produtos afetados

Macos X

Referências · 9

• http://us-cert.gov/cas/techalerts/TA07-109A.html · Nota
• http://securityfocus.com/bid/23569 · Correção
• http://securitytracker.com/id?1017942 · Nota
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Aviso do Fabricante
• http://secunia.com/advisories/24966 · Nota
• http://vupen.com/english/advisories/2007/1470 · Nota
• http://docs.info.apple.com/article.html?artnum=305391 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0741 · Nota de Segurança
• http://osvdb.org/34865 · Nota