CVE-2007-4703: Critical severity Apple iOS and macOS vulnerability

Published Nov 15, 2007
·
Updated

The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, even when "Block incoming connections" has been set for its associated executable, which might allow remote attackers or local root processes to bypass intended access restrictions.

Affected Software

2 affected components
Apple iOS and macOS=10.5
Apple Mac OS X Server=10.5

Event History

Nov 15, 2007
CVE Published
08:46 PM
Nov 16, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2007-4703?

CVE-2007-4703 is considered a medium severity vulnerability due to the potential for unauthorized access by bypassing firewall restrictions.

2

How do I fix CVE-2007-4703?

To mitigate CVE-2007-4703, ensure that you upgrade to a later version of Mac OS X that addresses this vulnerability.

3

Who is affected by CVE-2007-4703?

CVE-2007-4703 affects users of Apple Mac OS X 10.5 and Apple Mac OS X Server 10.5.

4

What kind of attacks can exploit CVE-2007-4703?

CVE-2007-4703 can be exploited by attackers using either remote connections or local root processes to bypass firewall settings.

5

Is there a workaround for CVE-2007-4703?

A potential workaround for CVE-2007-4703 includes limiting the use of root processes or modifying firewall settings to enhance security.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203