CVE-2007-0229

Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted DMG image that causes "allocation of a negative size buffer" leading to a heap-based buffer overflow, a related issue to CVE-2006-5679. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.10% chance of exploitation in the next 30 days, 63th percentile

Published

2007-01-13

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29441

References

• CVE Record
• NVD entry

Related

• CVE-2007-0228
• CVE-2007-0232
• CVE-2007-0226
• CVE-2007-0233
• CVE-2007-0225
• CVE-2007-0235