PT-2007-2192 · Apple · Macos X

Published 2007-04-24 · Updated 2011-03-08 · CVE-2007-0741

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.9

Description The issue is related to a buffer overflow in the natd component of network cmds. This occurs when Internet Sharing is enabled and the system receives malformed RTSP packets, allowing remote attackers to execute arbitrary code.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.9, consider disabling Internet Sharing until a patch is available to prevent exploitation of the buffer overflow vulnerability in natd.

Fix

Related Identifiers

CVE-2007-0741

Affected Products

Macos X

References · 9

• http://securityfocus.com/bid/23569 · Patch
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0741 · Security Note
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Note
• http://securitytracker.com/id?1017942 · Note
• http://secunia.com/advisories/24966 · Note
• http://vupen.com/english/advisories/2007/1470 · Note
• http://docs.info.apple.com/article.html?artnum=305391 · Note
• http://osvdb.org/34865 · Note