PT-2007-1826

CVE-2007-0355

Published

2007-01-19

Updated

2017-10-19

Description by

CVSS 2.0

7.2

High

MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mac OS X versions 10.4.11 and earlier

Description: A buffer overflow issue exists in the Apple Minimal SLP v2 Service Agent (slpd) that allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field.

Recommendations: For Mac OS X versions 10.4.11 and earlier, update to a version later than 10.4.11 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Kevin Finisterre

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers