CVE-2007-4267: Buffer Overflow
Published Nov 15, 2007
·Updated
Stack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted IOCTL request that adds an AppleTalk zone to a routing table.
Affected Software
11 affected components
Apple iOS and macOS=10.4.3
Apple iOS and macOS=10.4.1
Apple iOS and macOS=10.4.10
Apple iOS and macOS=10.4.9
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.4
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.6
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.4.2
Event History
Nov 15, 2007
CVE Published
01:46 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4267?
CVE-2007-4267 is classified as a critical vulnerability due to its ability to allow local users to execute arbitrary code.
2
How do I fix CVE-2007-4267?
To mitigate CVE-2007-4267, update your Mac OS X version to 10.4.11 or later, where the vulnerability has been patched.
3
What component is affected by CVE-2007-4267?
CVE-2007-4267 affects the Networking component of Apple Mac OS X 10.4 through 10.4.10.
4
How does CVE-2007-4267 exploit vulnerabilities in Mac OS X?
CVE-2007-4267 exploits vulnerabilities by using a crafted IOCTL request to manipulate the routing table.
5
Who is impacted by CVE-2007-4267?
Local users of Apple Mac OS X versions 10.4 through 10.4.10 are impacted by CVE-2007-4267.