CVE-2007-0735 — Apple MAC OS X vulnerability

2 documents2 sources
Severity
9.3CRITICALNVD
EPSS
1.2%
top 21.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedApr 24
Latest updateMay 1

Description

Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDapple/mac_os_x11 versions+10
▶NVDapple/mac_os_x_server11 versions+10

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-wjrh-26c5-99w5: Use-after-free vulnerability in Libinfo in Apple Mac OS X 10↗2022-05-01
▶
CVE-2007-0735 — Apple MAC OS X vulnerability | cvebase