CVE-2007-0236 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-0236
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0236

Description: Double-free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (kernel panic) and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow.

CVE Status: Candidate

References: ST 1017513 1017751 SAID Secunia Advisory: SA23708 Secunia Advisory: SA24479 OSVDB 32687 MISC http://projects.info-pull.com/moab/MOAB-14-01-2007.html MILW0RM http://www.milw0rm.com/exploits/3130 CONFIRM http://docs.info.apple.com/article.html?artnum=305214 CERT http://www.us-cert.gov/cas/techalerts/TA07-072A.html BID 22041 APPLE http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Return to the previous page.