[Forgot Password]
Login  Register Subscribe

23631

 
 

117687

 
 

98503

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-0229

Date: (C)2007-01-12   (M)2017-08-01 


Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted DMG image that causes "allocation of a negative size buffer" leading to a heap-based buffer overflow, a related issue to CVE-2006-5679. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.

CVSS Score: 7.2Access Vector: LOCAL
Exploit Score: 3.9Access Complexity: LOW
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECTRACK-1017751
BID-21993
SECUNIA-23703
SECUNIA-24479
OSVDB-32684
ADV-2007-0141
ADV-2007-0930
APPLE-SA-2007-03-13
TA07-072A
http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html
http://applefun.blogspot.com/2007/01/moab-10-01-2007-apple-dmg-ufs.html
http://docs.info.apple.com/article.html?artnum=305214
http://projects.info-pull.com/moab/MOAB-10-01-2007.html
macos-ffsmountfs-bo(31409)

CPE    3
cpe:/o:freebsd:freebsd:6.1
cpe:/o:apple:mac_os_x:10.4.8
cpe:/o:apple:mac_os_x_server:10.4.8
CWE    1
CWE-189

© 2013 SecPod Technologies