Info

Disclosure

May 25, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

An integer overflow exists in Mac OS X. The CoreGraphics library fails to validate PDF files resulting in an integer overflow. With a specially crafted file, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Local Access Required, Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Products

Apple Computer, Inc.	Mac OS X	10.4
		10.4.1
		10.4.2
		10.4.3
		10.4.4
		10.4.5
		10.4.6
		10.4.7
		10.4.8
		10.4.9

References

Security Tracker: 1018114
CVE ID: 2007-0750 (see also: NVD)
Bugtraq ID: 24144
Secunia Advisory ID: 25402 25402
ISS X-Force ID: 34499
Related OSVDB ID: 35141 35142 35143 35144 35145 35147
VUPEN Advisory: ADV-2007-1939
Vendor Specific Advisory URL: http://docs.info.apple.com/article.html?artnum=305530
Other Advisory URL: http://lists.apple.com/archives/security-announce/2007/May/msg00004.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/35146

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Apple Computer, Inc.

Mac OS X

References

Credit