NVD

Id
56396  
Name
CVE-2007-4268  
Description
Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-14  
Modified Date
2011-03-07  
Seq
2007-4268  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
287219 56396 CVE-2007-4268 http://docs.info.apple.com/article.html?artnum=307041  View
287220 56396 CVE-2007-4268 20071114 Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability  View
287221 56396 CVE-2007-4268 APPLE-SA-2007-11-14  View
287222 56396 CVE-2007-4268 1018950  View
287223 56396 CVE-2007-4268 26444  View
287224 56396 CVE-2007-4268 TA07-319A  View
287225 56396 CVE-2007-4268 ADV-2007-3868  View
287226 56396 CVE-2007-4268 macosx-networking-mbuf-bo(38476)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52265 JVNDB-2007-000955 Apple Mac OS X のネットワークコンポーネントにおけるヒープベースのバッファオーバーフローの脆弱性 Apple Mac OS X のネットワークコンポーネントには、AppleTalk のメモリ割り当て処理に不備があるために、ヒープベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4268 27623 CVE-2007-4268 56396 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000955.html 2007-11-14 2007-12-04 View