var-200701-0061
Vulnerability from variot
Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption. Apple Mac OS X Finder is prone to a memory-corruption vulnerability. This issue occurs when the application fails to handle overly long DMG volume names. Due to the nature of this issue, an attacker may be able to execute arbitrary machine code in the context of the affected application, but this has not been confirmed. Failed exploit attempts result in memory corruption and a crash of the application, denying service to legitimate users. Finder 10.4.6 on Mac OS X 10.4.8 X86 is vulnerable to this issue; other versions may also be affected. Remote attackers may use this vulnerability to control the user's machine. If an attacker can trick a user into loading a DMG image with a volume label name larger than 255 bytes, this vulnerability could be triggered, resulting in a denial of service or arbitrary command execution.
To improve our services to our customers, we have made a number of additions to the Secunia Advisories and have started translating the advisories to German.
The improvements will help our customers to get a better understanding of how we reached our conclusions, how it was rated, our thoughts on exploitation, attack vectors, and scenarios.
This includes: * Reason for rating * Extended description * Extended solution * Exploit code or links to exploit code * Deep links
Read the full description: http://corporate.secunia.com/products/48/?r=l
Contact Secunia Sales for more information: http://corporate.secunia.com/how_to_buy/15/?r=l
TITLE: Mac OS X Mach-O Universal Binary Memory Corruption
SECUNIA ADVISORY ID: SA23088
VERIFY ADVISORY: http://secunia.com/advisories/23088/
CRITICAL: Less critical
IMPACT: DoS, System access
WHERE: Local system
OPERATING SYSTEM: Apple Macintosh OS X http://secunia.com/product/96/
DESCRIPTION: LMH has reported a vulnerability in Mac OS X, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or potentially gain escalated privileges.
The vulnerability is caused due to an error in the fatfile_getarch2() function. This can be exploited to cause an integer overflow and may potentially allow execution of arbitrary code with kernel privileges via a specially crafted Mach-O Universal binary. Other versions may also be affected.
SOLUTION: Grant only trusted users access to affected systems.
PROVIDED AND/OR DISCOVERED BY: LMH
ORIGINAL ADVISORY: http://projects.info-pull.com/mokb/MOKB-26-11-2006.html
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200701-0061",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": null,
"scope": null,
"trust": 2.4,
"vendor": "apple computer",
"version": null
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.8"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.6"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.4.x"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.4.x"
},
{
"model": "finder",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "10.4.6"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.4.8"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.4.8"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#240880"
},
{
"db": "CERT/CC",
"id": "VU#346656"
},
{
"db": "CERT/CC",
"id": "VU#765096"
},
{
"db": "BID",
"id": "21980"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
},
{
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "LMH lmh@info-pull.com",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
}
],
"trust": 0.6
},
"cve": "CVE-2007-0197",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": true,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 6.8,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2007-0197",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-23559",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2007-0197",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#240880",
"trust": 0.8,
"value": "10.29"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#346656",
"trust": 0.8,
"value": "17.10"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#765096",
"trust": 0.8,
"value": "5.18"
},
{
"author": "CNNVD",
"id": "CNNVD-200701-133",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-23559",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#240880"
},
{
"db": "CERT/CC",
"id": "VU#346656"
},
{
"db": "CERT/CC",
"id": "VU#765096"
},
{
"db": "VULHUB",
"id": "VHN-23559"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
},
{
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption. Apple Mac OS X Finder is prone to a memory-corruption vulnerability. This issue occurs when the application fails to handle overly long DMG volume names. \nDue to the nature of this issue, an attacker may be able to execute arbitrary machine code in the context of the affected application, but this has not been confirmed. Failed exploit attempts result in memory corruption and a crash of the application, denying service to legitimate users. \nFinder 10.4.6 on Mac OS X 10.4.8 X86 is vulnerable to this issue; other versions may also be affected. Remote attackers may use this vulnerability to control the user\u0027s machine. If an attacker can trick a user into loading a DMG image with a volume label name larger than 255 bytes, this vulnerability could be triggered, resulting in a denial of service or arbitrary command execution. \n\n----------------------------------------------------------------------\n\nTo improve our services to our customers, we have made a number of\nadditions to the Secunia Advisories and have started translating the\nadvisories to German. \n\nThe improvements will help our customers to get a better\nunderstanding of how we reached our conclusions, how it was rated,\nour thoughts on exploitation, attack vectors, and scenarios. \n\nThis includes:\n* Reason for rating\n* Extended description\n* Extended solution\n* Exploit code or links to exploit code\n* Deep links\n\nRead the full description:\nhttp://corporate.secunia.com/products/48/?r=l\n\nContact Secunia Sales for more information:\nhttp://corporate.secunia.com/how_to_buy/15/?r=l\n\n----------------------------------------------------------------------\n\nTITLE:\nMac OS X Mach-O Universal Binary Memory Corruption\n\nSECUNIA ADVISORY ID:\nSA23088\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/23088/\n\nCRITICAL:\nLess critical\n\nIMPACT:\nDoS, System access\n\nWHERE:\nLocal system\n\nOPERATING SYSTEM:\nApple Macintosh OS X\nhttp://secunia.com/product/96/\n\nDESCRIPTION:\nLMH has reported a vulnerability in Mac OS X, which can be exploited\nby malicious, local users to cause a DoS (Denial of Service) or\npotentially gain escalated privileges. \n\nThe vulnerability is caused due to an error in the fatfile_getarch2()\nfunction. This can be exploited to cause an integer overflow and may\npotentially allow execution of arbitrary code with kernel privileges\nvia a specially crafted Mach-O Universal binary. Other versions may also be affected. \n\nSOLUTION:\nGrant only trusted users access to affected systems. \n\nPROVIDED AND/OR DISCOVERED BY:\nLMH\n\nORIGINAL ADVISORY:\nhttp://projects.info-pull.com/mokb/MOKB-26-11-2006.html\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-0197"
},
{
"db": "CERT/CC",
"id": "VU#240880"
},
{
"db": "CERT/CC",
"id": "VU#346656"
},
{
"db": "CERT/CC",
"id": "VU#765096"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"db": "BID",
"id": "21980"
},
{
"db": "VULHUB",
"id": "VHN-23559"
},
{
"db": "PACKETSTORM",
"id": "52529"
}
],
"trust": 4.23
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-23559",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23559"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "BID",
"id": "21980",
"trust": 3.6
},
{
"db": "CERT/CC",
"id": "VU#240880",
"trust": 3.6
},
{
"db": "SECTRACK",
"id": "1017662",
"trust": 3.3
},
{
"db": "SECUNIA",
"id": "24198",
"trust": 3.3
},
{
"db": "NVD",
"id": "CVE-2007-0197",
"trust": 2.8
},
{
"db": "USCERT",
"id": "TA07-047A",
"trust": 2.5
},
{
"db": "VUPEN",
"id": "ADV-2007-0140",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "32714",
"trust": 1.7
},
{
"db": "SECUNIA",
"id": "24479",
"trust": 1.6
},
{
"db": "SECTRACK",
"id": "1017751",
"trust": 1.6
},
{
"db": "XF",
"id": "31410",
"trust": 1.4
},
{
"db": "SECUNIA",
"id": "23088",
"trust": 0.9
},
{
"db": "BID",
"id": "21291",
"trust": 0.8
},
{
"db": "CERT/CC",
"id": "VU#346656",
"trust": 0.8
},
{
"db": "SECUNIA",
"id": "22808",
"trust": 0.8
},
{
"db": "BID",
"id": "20982",
"trust": 0.8
},
{
"db": "CERT/CC",
"id": "VU#765096",
"trust": 0.8
},
{
"db": "USCERT",
"id": "SA07-047A",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000013",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200701-133",
"trust": 0.7
},
{
"db": "CERT/CC",
"id": "TA07-047A",
"trust": 0.6
},
{
"db": "APPLE",
"id": "APPLE-SA-2007-02-15",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20070111 DMA[2007-0107A] OMNIWEB JAVASCRIPT ALERT FORMAT STRING VULNERABIITY AND DMA[2007-0109A] APPLE FINDER DISK IMAGE VOLUME LABEL OVERFLOW / DOS",
"trust": 0.6
},
{
"db": "EXPLOIT-DB",
"id": "3110",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-23559",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "52529",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#240880"
},
{
"db": "CERT/CC",
"id": "VU#346656"
},
{
"db": "CERT/CC",
"id": "VU#765096"
},
{
"db": "VULHUB",
"id": "VHN-23559"
},
{
"db": "BID",
"id": "21980"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"db": "PACKETSTORM",
"id": "52529"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
},
{
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"id": "VAR-200701-0061",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-23559"
}
],
"trust": 0.01
},
"last_update_date": "2024-07-23T22:14:37.008000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Security Update 2007-002 (PPC)",
"trust": 0.8,
"url": "http://www.apple.com/support/downloads/securityupdate2007002ppc.html"
},
{
"title": "Security Update 2007-002 (Universal)",
"trust": 0.8,
"url": "http://www.apple.com/support/downloads/securityupdate2007002universal.html"
},
{
"title": "Security Update 2007-002",
"trust": 0.8,
"url": "http://docs.info.apple.com/article.html?artnum=305102-en"
},
{
"title": "Security Update 2007-002",
"trust": 0.8,
"url": "http://docs.info.apple.com/article.html?artnum=305102-ja"
},
{
"title": "Security Update 2007-002 (PPC)",
"trust": 0.8,
"url": "http://www.apple.com/jp/ftp-info/reference/securityupdate2007002ppc.html"
},
{
"title": "Security Update 2007-002 (Universal)",
"trust": 0.8,
"url": "http://www.apple.com/jp/ftp-info/reference/securityupdate2007002universal.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-000013"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
},
{
"problemtype": "CWE-20",
"trust": 1.9
},
{
"problemtype": "CWE-399",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23559"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "http://www.securityfocus.com/bid/21980"
},
{
"trust": 2.8,
"url": "http://projects.info-pull.com/moab/moab-09-01-2007.html"
},
{
"trust": 2.8,
"url": "http://www.kb.cert.org/vuls/id/240880"
},
{
"trust": 2.5,
"url": "http://docs.info.apple.com/article.html?artnum=305102"
},
{
"trust": 2.5,
"url": "http://www.us-cert.gov/cas/techalerts/ta07-047a.html"
},
{
"trust": 2.5,
"url": "http://www.securitytracker.com/id?1017662"
},
{
"trust": 1.7,
"url": "http://lists.apple.com/archives/security-announce/2007/feb/msg00000.html"
},
{
"trust": 1.7,
"url": "http://www.digitalmunition.com/dma%5b2007-0109a%5d.txt"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/32714"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/24198"
},
{
"trust": 1.6,
"url": "http://secunia.com/advisories/24198/"
},
{
"trust": 1.6,
"url": "http://docs.info.apple.com/article.html?artnum=305214"
},
{
"trust": 1.6,
"url": "http://secunia.com/advisories/24479/"
},
{
"trust": 1.6,
"url": "http://securitytracker.com/alerts/2007/mar/1017751.html"
},
{
"trust": 1.4,
"url": "http://www.frsirt.com/english/advisories/2007/0140"
},
{
"trust": 1.4,
"url": "http://xforce.iss.net/xforce/xfdb/31410"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/456578/100/0/threaded"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2007/0140"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31410"
},
{
"trust": 0.9,
"url": "http://projects.info-pull.com/mokb/mokb-26-11-2006.html"
},
{
"trust": 0.9,
"url": "http://secunia.com/advisories/23088/"
},
{
"trust": 0.8,
"url": "http://securitytracker.com/alerts/2007/feb/1017662.html"
},
{
"trust": 0.8,
"url": "http://projects.info-pull.com/mokb/bug-files/mokb-26-11-2006.bz2"
},
{
"trust": 0.8,
"url": "http://www.securityfocus.com/bid/21291"
},
{
"trust": 0.8,
"url": "http://projects.info-pull.com/mokb/mokb-09-11-2006.html"
},
{
"trust": 0.8,
"url": "http://secunia.com/advisories/22808/"
},
{
"trust": 0.8,
"url": "http://www.securityfocus.com/bid/20982"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-0197"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnta07-047a/index.html"
},
{
"trust": 0.8,
"url": "http://jvn.jp/tr/trta07-047a/index.html"
},
{
"trust": 0.8,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2007-0197"
},
{
"trust": 0.8,
"url": "http://www.us-cert.gov/cas/alerts/sa07-047a.html"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/456578/100/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.digitalmunition.com/dma[2007-0109a].txt"
},
{
"trust": 0.3,
"url": "http://www.apple.com/macosx/"
},
{
"trust": 0.3,
"url": "/archive/1/456578"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://corporate.secunia.com/products/48/?r=l"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/96/"
},
{
"trust": 0.1,
"url": "http://corporate.secunia.com/how_to_buy/15/?r=l"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#240880"
},
{
"db": "CERT/CC",
"id": "VU#346656"
},
{
"db": "CERT/CC",
"id": "VU#765096"
},
{
"db": "VULHUB",
"id": "VHN-23559"
},
{
"db": "BID",
"id": "21980"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"db": "PACKETSTORM",
"id": "52529"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
},
{
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#240880"
},
{
"db": "CERT/CC",
"id": "VU#346656"
},
{
"db": "CERT/CC",
"id": "VU#765096"
},
{
"db": "VULHUB",
"id": "VHN-23559"
},
{
"db": "BID",
"id": "21980"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"db": "PACKETSTORM",
"id": "52529"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
},
{
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-02-16T00:00:00",
"db": "CERT/CC",
"id": "VU#240880"
},
{
"date": "2007-03-14T00:00:00",
"db": "CERT/CC",
"id": "VU#346656"
},
{
"date": "2007-03-14T00:00:00",
"db": "CERT/CC",
"id": "VU#765096"
},
{
"date": "2007-01-11T00:00:00",
"db": "VULHUB",
"id": "VHN-23559"
},
{
"date": "2007-01-09T00:00:00",
"db": "BID",
"id": "21980"
},
{
"date": "2007-04-01T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"date": "2006-11-28T00:52:20",
"db": "PACKETSTORM",
"id": "52529"
},
{
"date": "2007-01-11T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200701-133"
},
{
"date": "2007-01-11T11:28:00",
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-02-23T00:00:00",
"db": "CERT/CC",
"id": "VU#240880"
},
{
"date": "2007-03-30T00:00:00",
"db": "CERT/CC",
"id": "VU#346656"
},
{
"date": "2007-07-21T00:00:00",
"db": "CERT/CC",
"id": "VU#765096"
},
{
"date": "2018-10-16T00:00:00",
"db": "VULHUB",
"id": "VHN-23559"
},
{
"date": "2007-02-20T20:26:00",
"db": "BID",
"id": "21980"
},
{
"date": "2007-04-01T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-000013"
},
{
"date": "2007-01-15T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200701-133"
},
{
"date": "2018-10-16T16:31:40.417000",
"db": "NVD",
"id": "CVE-2007-0197"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Apple Mac OS X Finder DMG Volume Memory Corruption Vulnerability",
"sources": [
{
"db": "BID",
"id": "21980"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
}
],
"trust": 0.9
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "resource management error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200701-133"
}
],
"trust": 0.6
}
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.