VulnerabilityModified

CVE-2007-4267

Stack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted IOCTL request that adds an AppleTalk zone to a routing table.

HIGH 7.2EPSS 0.49%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.49%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 0.49% probability · 40th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: apple/mac os x
Source: cve@mitre.org

References

http://docs.info.apple.com/article.html?artnum=307041
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=627
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
http://secunia.com/advisories/27643Vendor Advisory
http://securitytracker.com/id?1018950
http://www.securityfocus.com/bid/26444
http://www.us-cert.gov/cas/techalerts/TA07-319A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2007/3868Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38475
http://docs.info.apple.com/article.html?artnum=307041
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=627
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
http://secunia.com/advisories/27643Vendor Advisory
http://securitytracker.com/id?1018950
http://www.securityfocus.com/bid/26444
http://www.us-cert.gov/cas/techalerts/TA07-319A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2007/3868Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38475

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.