| Vulnerability Name: | CVE-2007-0197 (CCN-31410) | ||||||||
| Assigned: | 2007-01-09 | ||||||||
| Published: | 2007-01-09 | ||||||||
| Updated: | 2018-10-16 | ||||||||
| Summary: | Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption. | ||||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
| ||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C)
4.2 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C/E:POC/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-399 CWE-119 CWE-20 | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: MITRE Type: CNA CVE-2007-0197 Source: CCN Type: Apple Security Update 2007-002 About Security Update 2007-002 Source: CONFIRM Type: UNKNOWN http://docs.info.apple.com/article.html?artnum=305102 Source: APPLE Type: UNKNOWN APPLE-SA-2007-02-15 Source: CCN Type: MOAB-09-01-2007 Apple Finder DMG Volume Name Memory Corruption Source: MISC Type: Exploit http://projects.info-pull.com/moab/MOAB-09-01-2007.html Source: CCN Type: SA24198 Mac OS X Security Update Fixes Multiple Vulnerabilities Source: SECUNIA Type: UNKNOWN 24198 Source: CCN Type: SECTRACK ID: 1017662 Mac OS X Finder Disk Image Buffer Overflow Lets Remote Users Execute Arbitrary Code Source: CCN Type: Apple Mac OS X Web site Apple - Mac OS X Source: MISC Type: UNKNOWN http://www.digitalmunition.com/DMA%5B2007-0109a%5D.txt Source: CCN Type: DMA[2007-0109a] Apple Finder Disk Image Volume Label Overflow / DoS Source: CCN Type: US-CERT VU#240880 Apple Mac OS X Finder DMG volume name buffer overflow Source: CERT-VN Type: US Government Resource VU#240880 Source: OSVDB Type: UNKNOWN 32714 Source: CCN Type: OSVDB ID: 32714 Apple Mac OS X Finder DMG Disk Image Volume Name Memory Corruption Source: BUGTRAQ Type: UNKNOWN 20070111 DMA[2007-0107a] OmniWeb Javascript Alert Format String Vulnerabiity and DMA[2007-0109a] Apple Finder Disk Image Volume Label Overflow / DoS Source: BID Type: UNKNOWN 21980 Source: CCN Type: BID-21980 Apple Mac OS X Finder DMG Volume Memory Corruption Vulnerability Source: SECTRACK Type: UNKNOWN 1017662 Source: CERT Type: US Government Resource TA07-047A Source: VUPEN Type: UNKNOWN ADV-2007-0140 Source: XF Type: UNKNOWN macos-finder-dos(31410) Source: XF Type: UNKNOWN macos-finder-dos(31410) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||