PT-2007-5840 · Apple · Macos X

Published 2007-11-15 · Updated 2024-02-09 · CVE-2007-4682

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.4 through 10.4.10

Description: The issue allows attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved through crafted text content that triggers access to an uninitialized object pointer.

Recommendations: For Apple Mac OS X versions 10.4 through 10.4.10, update to a version outside of this range to mitigate the risk.

Fix

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

CVE-2007-4682

Affected Products

Macos X

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-4682 · Security Note
• http://secunia.com/advisories/27643 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3868 · Note
• http://us-cert.gov/cas/techalerts/TA07-319A.html · Note
• http://kb.cert.org/vuls/id/498105 · Note
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html · Patch, Vendor Advisory
• http://securityfocus.com/bid/26444 · Note
• http://securitytracker.com/id?1018950 · Note
• http://docs.info.apple.com/article.html?artnum=307041 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38465 · Note