PT-2007-4987 · Oracle+1 · Java+2

Publicado 2007-08-03 · Atualizado 2017-07-29 · CVE-2007-3746

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java interface to CoreAudio on Mac OS X versions 10.3.9 through 10.4.10

Description The issue is related to improper bounds checking of heap read and write operations in the Java interface to CoreAudio. This allows remote attackers to execute arbitrary code via a crafted applet.

Recommendations For Mac OS X versions 10.3.9 through 10.4.10, consider disabling the Java interface to CoreAudio as a temporary workaround until a patch is available. Restrict access to the CoreAudio interface to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-3746

Produtos afetados

Coreaudio

Java

Macos X

Referências · 8

• http://securitytracker.com/id?1018492 · Correção
• http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html · Aviso do Fabricante
• http://securityfocus.com/bid/25159 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-3746 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35727 · Nota
• http://vupen.com/english/advisories/2007/2732 · Nota
• http://docs.info.apple.com/article.html?artnum=306172 · Nota
• http://secunia.com/advisories/26235 · Aviso do Fabricante