Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2007-4268 First vendor Publication 2007-11-14
Vendor Cve Last vendor Modification 2017-07-29

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 7.2 Attack Range Local
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4268

CAPEC : Common Attack Pattern Enumeration & Classification

Id Name
CAPEC-92 Forced Integer Overflow

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-189 Numeric Errors (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 11

OpenVAS Exploits

Date Description
2009-11-17 Name : Mac OS X Version
File : nvt/macosx_version.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
40683 Apple Mac OS X Networking Component AppleTalk Message Handling Local Overflow

A buffer overflow exists in Mac OS X. The Networking component fails to validate AppleTalk messages resulting in an arithmetic error which causes a heap overflow. With a specially crafted AppleTalk message, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Nessus® Vulnerability Scanner

Date Description
2007-11-14 Name : The remote host is missing a Mac OS X update which fixes a security issue.
File : macosx_10_4_11.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
APPLE http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
BID http://www.securityfocus.com/bid/26444
CERT http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CONFIRM http://docs.info.apple.com/article.html?artnum=307041
IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=628
SECTRACK http://securitytracker.com/id?1018950
SECUNIA http://secunia.com/advisories/27643
VUPEN http://www.vupen.com/english/advisories/2007/3868
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/38476

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
Date Informations
2020-05-23 00:20:16
  • Multiple Updates
2017-07-29 12:02:27
  • Multiple Updates
2016-04-26 16:28:31
  • Multiple Updates
2014-02-17 10:41:16
  • Multiple Updates
2013-05-11 10:33:45
  • Multiple Updates