CVE-2007-0736: Integer Overflow
Published Apr 24, 2007
·Updated
Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via crafted requests to portmap.
Affected Software
22 affected components
Apple iOS and macOS=10.4.3
Apple Mac OS X Server=10.4.3
Apple Mac OS X Server=10.4.9
Apple iOS and macOS=10.4.1
Apple Mac OS X Server=10.4.2
Apple Mac OS X Server=10.4.4
Apple Mac OS X Server=10.4.1
Apple iOS and macOS=10.4.9
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.4
Apple Mac OS X Server=10.4
Apple Mac OS X Server=10.4.5
Apple iOS and macOS=10.4
Apple Mac OS X Server=10.4.6
Apple Mac OS X Server=10.3.9
Apple Mac OS X Server=10.4.8
Apple iOS and macOS=10.4.6
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.4.8
Apple Mac OS X Server=10.4.7
Apple iOS and macOS=10.4.2
Remediation
Patch Available
Event History
Apr 24, 2007
CVE Published
05:19 PM
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0736?
CVE-2007-0736 is rated as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2007-0736?
To fix CVE-2007-0736, you should update your Apple Mac OS X software to the latest version available that addresses this vulnerability.
3
Which versions of Apple Mac OS X are affected by CVE-2007-0736?
CVE-2007-0736 affects Apple Mac OS X versions 10.3.9 through 10.4.9.
4
What type of vulnerability is CVE-2007-0736?
CVE-2007-0736 is an integer overflow vulnerability in the RPC library.
5
Can CVE-2007-0736 be exploited remotely?
Yes, CVE-2007-0736 can be exploited remotely through crafted requests to the portmap service.