CVE-2007-4681: Buffer Overflow

Published Nov 15, 2007

Updated

Buffer overflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted directory hierarchy.

Affected Software

13 affected components

Apple iOS and macOS=10.4.3

Apple iOS and macOS=10.4.1

Apple iOS and macOS=10.4.10

Apple iOS and macOS=10.4.9

Apple iOS and macOS=10.4.7

Apple iOS and macOS=10.4.4

Apple iOS and macOS=10.4.0

Apple iOS and macOS=10.4

Apple iOS and macOS=10.4.6

Apple iOS and macOS=10.4.5

Apple iOS and macOS=10.3.9

Apple iOS and macOS=10.4.8

Apple iOS and macOS=10.4.2

Event History

Nov 15, 2007

CVE Published

01:46 AM

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4681?

CVE-2007-4681 has been classified as a high severity vulnerability due to its potential to cause application crashes and arbitrary code execution.

How do I fix CVE-2007-4681?

To fix CVE-2007-4681, update your Mac OS X to the latest version that addresses this vulnerability.

What versions of Mac OS X are affected by CVE-2007-4681?

CVE-2007-4681 affects Mac OS X versions 10.3.9 and from 10.4 through 10.4.10.

What types of attacks are possible due to CVE-2007-4681?

Exploitation of CVE-2007-4681 may lead to denial of service via application crashes and the potential for executing arbitrary code.

Is CVE-2007-4681 a local or remote vulnerability?

CVE-2007-4681 is a local vulnerability, meaning it requires local user access to the affected system to be exploited.