CVEvulnerability

CVE-2007-4682

6.8 MEDIUM Published 2007-11-15 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-11-15
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses: CWE-824

Description

CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer.

Affected configurations

• apple mac os x (>= 10.4 <= 10.4.10)

Weakness · CWE (1)

CWE-824 Access of Uninitialized Pointer weakness

Referenced by CWE · observed example (2)

CWE-457 Use of Uninitialized Variable weakness
CWE-824 Access of Uninitialized Pointer weakness

References

http://docs.info.apple.com/article.html?artnum=307041 Broken Link
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html Mailing List, Patch
http://secunia.com/advisories/27643 Broken Link, Vendor Advisory
http://securitytracker.com/id?1018950 Broken Link, Third Party Advisory, VDB Entry
http://www.kb.cert.org/vuls/id/498105 Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/26444 Broken Link, Third Party Advisory, VDB Entry
http://www.us-cert.gov/cas/techalerts/TA07-319A.html Broken Link, Third Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2007/3868 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/38465 VDB Entry
http://docs.info.apple.com/article.html?artnum=307041 Broken Link
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html Mailing List, Patch
http://secunia.com/advisories/27643 Broken Link, Vendor Advisory
http://securitytracker.com/id?1018950 Broken Link, Third Party Advisory, VDB Entry
http://www.kb.cert.org/vuls/id/498105 Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/26444 Broken Link, Third Party Advisory, VDB Entry
http://www.us-cert.gov/cas/techalerts/TA07-319A.html Broken Link, Third Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2007/3868 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/38465 VDB Entry