CVE-2007-4702: Critical severity Apple iOS and macOS vulnerability

Published Nov 15, 2007

Updated

The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.

Affected Software

2 affected components

Apple iOS and macOS=10.5

Apple Mac OS X Server=10.5

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html

Event History

Nov 15, 2007

CVE Published

08:46 PM

Nov 16, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4702?

CVE-2007-4702 has a moderate severity level due to its potential to allow bypassing access controls.

How do I fix CVE-2007-4702?

To mitigate CVE-2007-4702, users should disable the 'Block all incoming connections' setting in the Application Firewall.

What systems are affected by CVE-2007-4702?

CVE-2007-4702 affects Apple Mac OS X 10.5 and Apple Mac OS X Server 10.5.

What are the risks associated with CVE-2007-4702?

The primary risk of CVE-2007-4702 is that it allows unauthorized incoming connections to root processes, compromising system security.

Can CVE-2007-4702 be exploited remotely?

Yes, CVE-2007-4702 can potentially be exploited remotely by attackers if certain conditions are met.