CVE-2007-0197

Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption.

• CWE-20
• CWE-119
• CWE-399

• http://docs.info.apple.com/article.html?artnum=305102
• http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html
• http://projects.info-pull.com/moab/MOAB-09-01-2007.htmlExploit
• http://secunia.com/advisories/24198
• http://www.digitalmunition.com/DMA%5B2007-0109a%5D.txt
• http://www.kb.cert.org/vuls/id/240880US Government Resource
• http://www.osvdb.org/32714
• http://www.securityfocus.com/archive/1/456578/100/0/threaded
• http://www.securityfocus.com/bid/21980
• http://www.securitytracker.com/id?1017662
• http://www.us-cert.gov/cas/techalerts/TA07-047A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/0140
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31410
• http://docs.info.apple.com/article.html?artnum=305102
• http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html
• http://projects.info-pull.com/moab/MOAB-09-01-2007.htmlExploit
• http://secunia.com/advisories/24198
• http://www.digitalmunition.com/DMA%5B2007-0109a%5D.txt
• http://www.kb.cert.org/vuls/id/240880US Government Resource
• http://www.osvdb.org/32714
• http://www.securityfocus.com/archive/1/456578/100/0/threaded
• http://www.securityfocus.com/bid/21980
• http://www.securitytracker.com/id?1017662
• http://www.us-cert.gov/cas/techalerts/TA07-047A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/0140
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31410

Published

Jan 11, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0191Cross-site scripting (XSS) vulnerability in admin.php in MKP…
• CVE-2007-0192Cross-site request forgery (CSRF) vulnerability in the save_…
• CVE-2007-0193FON La Fonera routers do not properly limit DNS service acce…
• CVE-2007-0194admin.php in MKPortal M1.1 RC1 allows remote attackers to ob…
• CVE-2007-0195my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 …
• CVE-2007-0196SQL injection vulnerability in admin_check_user.asp in Motio…
• CVE-2007-0198The JTapi Gateway process in Cisco Unified Contact Center En…
• CVE-2007-0199The Data-link Switching (DLSw) feature in Cisco IOS 11.0 thr…
• CVE-2007-0200PHP remote file inclusion vulnerability in template.php in G…
• CVE-2007-0201Buffer overflow in the cmd_usr function in ftp-gw in TIS Int…
• CVE-2007-0202SQL injection vulnerability in index.php in @lex Guestbook 4…
• CVE-2007-0203Multiple unspecified vulnerabilities in phpMyAdmin before 2.…