PT-2007-2191 · Apple · Macos X

Greg Bolsinga · Published 2007-05-24 · Updated 2017-07-29 · CVE-2007-0740

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.9

Description The issue concerns the Alias Manager in Apple Mac OS X, which fails to display files with the same name in mounted disk images that have the same name. This could potentially allow attackers to trick users into executing malicious files.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.9, consider avoiding the use of disk images with the same name to minimize the risk of exploitation. As a temporary workaround, users should exercise caution when executing files from mounted disk images. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0740

Affected Products

Macos X

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-0740 · Security Note
• http://lists.apple.com/archives/security-announce/2007/May/msg00004.html · Vendor Advisory
• http://securitytracker.com/id?1018121 · Note
• http://docs.info.apple.com/article.html?artnum=305530 · Note
• http://secunia.com/advisories/25402 · Note
• http://osvdb.org/35147 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34498 · Note
• http://vupen.com/english/advisories/2007/1939 · Note
• http://securityfocus.com/bid/24144 · Note