CVE

Id
23820  
CVE No.
CVE-2007-0463  
Status
Candidate  
Description
Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in (1) SWUTMP or (2) SUCATALOG filenames, or using the (3) application/x-apple.sucatalog+xml MIME type.  
Phase
Assigned (20070123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
231775 23820 CVE-2007-0463 MISC:http://projects.info-pull.com/moab/MOAB-24-01-2007.html  View
231776 23820 CVE-2007-0463 CONFIRM:http://docs.info.apple.com/article.html?artnum=305214  View
231777 23820 CVE-2007-0463 APPLE:APPLE-SA-2007-03-13  View
231778 23820 CVE-2007-0463 URL:http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html  View
231779 23820 CVE-2007-0463 CERT:TA07-072A  View
231780 23820 CVE-2007-0463 URL:http://www.us-cert.gov/cas/techalerts/TA07-072A.html  View
231781 23820 CVE-2007-0463 BID:22222  View
231782 23820 CVE-2007-0463 URL:http://www.securityfocus.com/bid/22222  View
231783 23820 CVE-2007-0463 VUPEN:ADV-2007-0337  View
231784 23820 CVE-2007-0463 URL:http://www.vupen.com/english/advisories/2007/0337  View
231785 23820 CVE-2007-0463 VUPEN:ADV-2007-0930  View
231786 23820 CVE-2007-0463 URL:http://www.vupen.com/english/advisories/2007/0930  View
231787 23820 CVE-2007-0463 OSVDB:32703  View
231788 23820 CVE-2007-0463 URL:http://www.osvdb.org/32703  View
231789 23820 CVE-2007-0463 SECTRACK:1017755  View
231790 23820 CVE-2007-0463 URL:http://www.securitytracker.com/id?1017755  View
231791 23820 CVE-2007-0463 SECUNIA:24479  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51645 JVNDB-2007-000308 Apple Mac OS X のインストーラにおけるフォーマットストリングの脆弱性 Apple Mac OS X のインストーラには、不正なファイル名の MPKG や DISTZ といったインストーラパッケージを処理した際に、フォーマットストリングの脆弱性が存在します。 CVE-2007-0465 23820 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000308.html  View