Vulnerability in Apple Mac Os X

CVE-2007-4268

Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow.

EPSS: 0.007 (48.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (x_refsource_IDEFENSE, Broken Link, third-party-advisory)
  • cve@mitre.org (vendor-advisory, x_refsource_APPLE, Mailing List, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Broken Link)
  • cve@mitre.org (vdb-entry, Broken Link, x_refsource_VUPEN)
  • cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
  • cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, Broken Link, third-party-advisory)

Frequently asked questions

What is CVE-2007-4268?
CVE-2007-4268 is a high-severity vulnerability in Apple Mac Os X, classified under Incorrect Conversion between Numeric Types. CVSS score: 7.8/10. Published 2007-11-15.
How severe is CVE-2007-4268?
High severity. CVSS v3 base score is 7.8 out of 10.