CVE-2007-0735
Last modified
CVE-2007-0735 is a vulnerability of currently unknown severity. Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory.. EPSS estimates a 3.62% chance of exploitation in the next 30 days.
Description
Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | 10.3.9 |
| Apple | Mac Os X | 10.4 |
| Apple | Mac Os X | 10.4.1 |
| Apple | Mac Os X | 10.4.2 |
| Apple | Mac Os X | 10.4.3 |
| Apple | Mac Os X | 10.4.4 |
| Apple | Mac Os X | 10.4.5 |
| Apple | Mac Os X | 10.4.6 |
| Apple | Mac Os X | 10.4.7 |
| Apple | Mac Os X | 10.4.8 |
| Apple | Mac Os X | 10.4.9 |
| Apple | Mac Os X Server | 10.3.9 |
| Apple | Mac Os X Server | 10.4 |
| Apple | Mac Os X Server | 10.4.1 |
| Apple | Mac Os X Server | 10.4.2 |
| Apple | Mac Os X Server | 10.4.3 |
| Apple | Mac Os X Server | 10.4.4 |
| Apple | Mac Os X Server | 10.4.5 |
| Apple | Mac Os X Server | 10.4.6 |
| Apple | Mac Os X Server | 10.4.7 |
| Apple | Mac Os X Server | 10.4.8 |
| Apple | Mac Os X Server | 10.4.9 |
References
- http://www.us-cert.gov/cas/techalerts/TA07-109A.htmlUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA07-109A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0735?
How severe is CVE-2007-0735?
How do I fix CVE-2007-0735?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0729Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 th…
- CVE-2007-0730Server Manager (servermgrd) in Apple Mac OS X 10.3.9 and 10.…
- CVE-2007-0731Stack-based buffer overflow in the Apple-specific Samba modu…
- CVE-2007-0732Unspecified vulnerability in the CoreServices daemon in Carb…
- CVE-2007-0733Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.…
- CVE-2007-0734fsck, as used by the AirPort Disk feature of the AirPort Ext…
- CVE-2007-0736Integer overflow in the RPC library in Libinfo in Apple Mac …
- CVE-2007-0737The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 doe…
- CVE-2007-0738The Login Window in Apple Mac OS X 10.4 through 10.4.9 does …
- CVE-2007-0739The Login Window in Apple Mac OS X 10.4 through 10.4.9 displ…
- CVE-2007-0740Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not d…
- CVE-2007-0741Buffer overflow in natd in network_cmds in Apple Mac OS X 10…
Are you affected by CVE-2007-0735?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST