Vulnerability in N/a

CVE-2007-0197

Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption.

EPSS: 0.553 (98.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

APPLE-SA-2007-02-15 (vendor-advisory, x_refsource_APPLE)
ADV-2007-0140 (vdb-entry, x_refsource_VUPEN)
TA07-047A (x_refsource_CERT, third-party-advisory)
24198 (x_refsource_SECUNIA, third-party-advisory)
32714 (x_refsource_OSVDB, vdb-entry)
macos-finder-dos(31410) (vdb-entry, x_refsource_XF)
21980 (vdb-entry, x_refsource_BID)
VU#240880 (x_refsource_CERT-VN, third-party-advisory)
docs.info.apple.com/article.html (x_refsource_CONFIRM)
20070111 DMA[2007-0107a] OmniWeb Javascript Alert Format String Vulnerabiity and DMA[2007-0109a] Apple Finder Disk Image Volume Label Overflow / DoS (mailing-list, x_refsource_BUGTRAQ)