Executive Summary

Summary
Title Apple Mac OS X CoreText uninitialized pointer vulnerability
Informations
Name VU#498105 First vendor Publication 2007-11-14
Vendor VU-CERT Last vendor Modification 2007-11-15
Severity (Vendor) N/A Revision M

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability Note VU#498105

Apple Mac OS X CoreText uninitialized pointer vulnerability

Overview

Apple Mac OS X CoreText contains an uninitialized pointer vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

I. Description

Apple Mac OS X CoreText is a framework for handling text on Mac OS X Tiger (10.4) and later. Mac OS X CoreText fails to properly initialize pointers, which can cause memory corruption. Any application that uses the CoreText framework for handling text may be vulnerable.

II. Impact

By convincing a user to view specially crafted text, a remote, unauthenticated attacker may be able to execute arbitrary code or cause a denial of service on a vulnerable system.

III. Solution

Apply an update

This issue is addressed in Mac OS X 10.4.11 and Apple Security Update 2007-008.

Systems Affected

VendorStatusDate Updated
Apple Computer, Inc.Vulnerable12-Nov-2007

References


http://docs.info.apple.com/article.html?artnum=307041
http://secunia.com/advisories/27643/

Credit

This vulnerability was repoted by Will Dormann of the CERT/CC.

This document was written by Will Dormann.

Other Information

Date Public10/14/2007
Date First Published11/14/2007 06:08:55 PM
Date Last Updated11/15/2007
CERT Advisory 
CVE NameCVE-2007-4682
Metric7.76
Document Revision8

Original Source

Url : http://www.kb.cert.org/vuls/id/498105

CWE : Common Weakness Enumeration

% Id Name

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Os 52

OpenVAS Exploits

Date Description
2009-11-17 Name : Mac OS X Version
File : nvt/macosx_version.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
40678 Apple Mac OS X CoreText Crafted Text Content Unspecified Overflow

An unspecified overflow exists in Mac OS X. The CoreText component fails to validate text content resulting in a buffer overflow. With a specially crafted text string, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Nessus® Vulnerability Scanner

Date Description
2007-11-14 Name : The remote host is missing a Mac OS X update which fixes a security issue.
File : macosx_10_4_11.nasl - Type : ACT_GATHER_INFO