First published: Tue Apr 24 2007(Updated: )
Heap-based buffer overflow in the VideoConference framework in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via a "crafted SIP packet when initializing an audio/video conference".
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | =10.4.3 | |
Apple Mac OS X Server | =10.4.3 | |
Apple Mac OS X Server | =10.4.9 | |
macOS Yosemite | =10.4.1 | |
Apple Mac OS X Server | =10.4.2 | |
Apple Mac OS X Server | =10.4.4 | |
Apple Mac OS X Server | =10.4.1 | |
macOS Yosemite | =10.4.9 | |
macOS Yosemite | =10.4.7 | |
macOS Yosemite | =10.4.4 | |
Apple Mac OS X Server | =10.4 | |
Apple Mac OS X Server | =10.4.5 | |
macOS Yosemite | =10.4 | |
Apple Mac OS X Server | =10.4.6 | |
Apple Mac OS X Server | =10.3.9 | |
Apple Mac OS X Server | =10.4.8 | |
macOS Yosemite | =10.4.6 | |
macOS Yosemite | =10.4.5 | |
macOS Yosemite | =10.3.9 | |
macOS Yosemite | =10.4.8 | |
Apple Mac OS X Server | =10.4.7 | |
macOS Yosemite | =10.4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2007-0746 is considered high due to its potential to allow remote attackers to execute arbitrary code.
To fix CVE-2007-0746, apply the latest security updates provided by Apple for affected versions of Mac OS X.
CVE-2007-0746 affects Mac OS X versions 10.3.9 through 10.4.9.
Yes, CVE-2007-0746 can be exploited remotely through crafted SIP packets during audio/video conference initialization.
Successful exploitation of CVE-2007-0746 can lead to arbitrary code execution on the affected system.