CVE-2007-0299

{"id": "CVE-2007-0299", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-01-17T11:28:00.000", "references": [{"url": "http://docs.info.apple.com/article.html?artnum=305214", "source": "cve@mitre.org"}, {"url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html", "source": "cve@mitre.org"}, {"url": "http://projects.info-pull.com/moab/MOAB-11-01-2007.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23725", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24479", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/515792", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/31653", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1017751", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0930", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in the byte_swap_sbin function in bsd/ufs/ufs/ufs_byte_order.c in Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service (kernel panic) by mounting a crafted Unix File System (UFS) DMG image, which triggers an invalid pointer dereference."}, {"lang": "es", "value": "Desbordamiento de entero en la funci\u00f3n byte_swap_sbin de bsd/ufs/ufs/ufs_byte_order.c en Mac OS X 10.4.8 permite a atacantes remotos con la complicidad del usuario provocar una denegaci\u00f3n de servicio (kernel panic) montando una imagen DMG artesanal del sistema de ficheros Unix (UFS), lo cual provoca una referencia de puntero inv\u00e1lida."}], "lastModified": "2011-03-08T02:49:12.737", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09ED46A8-1739-411C-8807-2A416BDB6DFE"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}