CVE-2007-0236 in Mac OS Xinfo

Summary

Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (kernel panic) and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/16/2007

Disclosure

01/16/2007

Entries

1

CPE

ready

Exploit

Download

CVSS

7.5

EPSS

0.50941

CTI

0.00

Sources

Interested in the pricing of exploits?

See the underground prices here!