CVE

Id
27625  
CVE No.
CVE-2007-4268  
Status
Candidate  
Description
Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow.  
Phase
Assigned (20070809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284268 27625 CVE-2007-4268 IDEFENSE:20071114 Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability  View
284269 27625 CVE-2007-4268 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=628  View
284270 27625 CVE-2007-4268 CONFIRM:http://docs.info.apple.com/article.html?artnum=307041  View
284271 27625 CVE-2007-4268 APPLE:APPLE-SA-2007-11-14  View
284272 27625 CVE-2007-4268 URL:http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html  View
284273 27625 CVE-2007-4268 CERT:TA07-319A  View
284274 27625 CVE-2007-4268 URL:http://www.us-cert.gov/cas/techalerts/TA07-319A.html  View
284275 27625 CVE-2007-4268 BID:26444  View
284276 27625 CVE-2007-4268 URL:http://www.securityfocus.com/bid/26444  View
284277 27625 CVE-2007-4268 VUPEN:ADV-2007-3868  View
284278 27625 CVE-2007-4268 URL:http://www.vupen.com/english/advisories/2007/3868  View
284279 27625 CVE-2007-4268 SECTRACK:1018950  View
284280 27625 CVE-2007-4268 URL:http://securitytracker.com/id?1018950  View
284281 27625 CVE-2007-4268 SECUNIA:27643  View
284282 27625 CVE-2007-4268 URL:http://secunia.com/advisories/27643  View
284283 27625 CVE-2007-4268 XF:macosx-networking-mbuf-bo(38476)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55563 JVNDB-2007-004255 IBM DB2 UDB における root 権限を取得される脆弱性 IBM DB2 UDB は、競合状態が発生するため、root 権限を取得される脆弱性が存在します。 CVE-2007-4270 27625 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004255.html  View