PT-2007-1826

CVE-2007-0355

Publicado

2007-01-19

Atualizado

2017-10-19

Descrição por

CVSS 2.0

7.2

Alta

MétricasAV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mac OS X versions 10.4.11 and earlier

Description: A buffer overflow issue exists in the Apple Minimal SLP v2 Service Agent (slpd) that allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field.

Recommendations: For Mac OS X versions 10.4.11 and earlier, update to a version later than 10.4.11 to resolve the issue.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Kevin Finisterre

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Identificadores relacionados