PT-2007-2177 · Apple · Macos X+1

Published 2007-04-24 · Updated 2011-03-08 · CVE-2007-0725

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.9

Description A buffer overflow issue exists in the AirPortDriver module for AirPort, allowing local users to execute arbitrary code by sending malformed control commands when running on hardware with the original AirPort wireless card.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.9, consider disabling the AirPortDriver module as a temporary workaround until a patch is available. Restrict access to the AirPort wireless card to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-0725

Affected Products

Airport

Macos X

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-0725 · Security Note
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Note
• http://secunia.com/advisories/24966 · Note
• http://securityfocus.com/bid/23569 · Note
• http://vupen.com/english/advisories/2007/1470 · Note
• http://osvdb.org/34857 · Note
• http://docs.info.apple.com/article.html?artnum=305391 · Note