First published: Tue Jan 30 2007(Updated: )
The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service (application crash) via a crafted HTTP 301 response, which results in a NULL pointer dereference.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | =10.4 | |
macOS Yosemite | =10.4.1 | |
macOS Yosemite | =10.4.2 | |
macOS Yosemite | =10.4.3 | |
macOS Yosemite | =10.4.4 | |
macOS Yosemite | =10.4.5 | |
macOS Yosemite | =10.4.6 | |
macOS Yosemite | =10.4.7 | |
macOS Yosemite | =10.4.8 | |
macOS Yosemite | =10.4.9 | |
macOS Yosemite | =10.4.10 | |
CFNetwork | =129.19 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-0464 is classified as a denial-of-service vulnerability due to application crashes.
To mitigate CVE-2007-0464, it is recommended to update to a patched version of CFNetwork or Apple Mac OS X.
CVE-2007-0464 affects Mac OS X 10.4 through 10.4.10.
The attack involves sending a crafted HTTP 301 response that causes a NULL pointer dereference.
Yes, CVE-2007-0464 specifically originates from a vulnerability in CFNetwork version 129.19.