CVE-2007-0735: Use After Free

Published Apr 24, 2007
·
Updated

Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory.

Affected Software

22 affected components
Apple iOS and macOS=10.4.3
Apple Mac OS X Server=10.4.3
Apple Mac OS X Server=10.4.9
Apple iOS and macOS=10.4.1
Apple Mac OS X Server=10.4.2
Apple Mac OS X Server=10.4.4
Apple Mac OS X Server=10.4.1
Apple iOS and macOS=10.4.9
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.4
Apple Mac OS X Server=10.4
Apple Mac OS X Server=10.4.5
Apple iOS and macOS=10.4
Apple Mac OS X Server=10.4.6
Apple Mac OS X Server=10.3.9
Apple Mac OS X Server=10.4.8
Apple iOS and macOS=10.4.6
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.4.8
Apple Mac OS X Server=10.4.7
Apple iOS and macOS=10.4.2

Remediation

Event History

Apr 24, 2007
CVE Published
05:19 PM
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2007-0735?

CVE-2007-0735 is classified as a moderate severity vulnerability due to its ability to cause denial of service or potentially allow remote code execution.

2

How do I fix CVE-2007-0735?

To mitigate CVE-2007-0735, update to the latest version of Mac OS X beyond 10.4.9, which includes patches for this vulnerability.

3

What versions of Apple Mac OS X are affected by CVE-2007-0735?

CVE-2007-0735 affects Apple Mac OS X versions 10.3.9 to 10.4.9.

4

What type of attack can exploit CVE-2007-0735?

CVE-2007-0735 can be exploited through crafted web pages that invoke error conditions leading to a use-after-free vulnerability.

5

What are the potential consequences of CVE-2007-0735?

The consequences of CVE-2007-0735 include application crashes and the possibility of executing arbitrary code on affected systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203